git-gate
Recokioshi/claude-kit
Git only when you asked: commits, pushes, pull requests, merges and destructive git commands run only when your latest message (or /ship, /kickoff, or your answer to Claude's question) allowed them; everything else is refused with a note telling Claude to ask. No UI.