privacy-gateway
kexi/claude-privacy-gateway
PII and secrets are swapped for placeholders (PII_PERSON_1) by regex and a local Gemma 4 before anything reaches Claude; placeholders are restored only where the work stays on this machine (local tool calls) and on screen.