tripwire
ryx2/slopshopper
Holds destructive commands until you say so: rm -rf, force pushes, git reset --hard, DROP TABLE, curl | sh, sudo, chmod -R 777, edits to .env. One question in Claude's own dialog, fail-closed if the guard itself breaks, and a /tripwire log of every decision.