Filesystem
Sensitive writes, deletes outside the work tree and secret files.
GUARD FEATURES
rm -rf does not run.
The force-push waits.
Guard hooks the agent and decides on your machine. A wipe is a block. A force-push to main is a card. A .env commit is a block. A poisoned skill reading keys is a block where the agent allows one.
Request Guard betaWhat it stops
rm -rf ~/projects
Blocked before the shell runs. The work tree stays.
git add .env
A commit that would take your secrets with it is blocked. So is a write of ~/.aws/credentials.
Poisoned MCP skill
A server or skill that reads keys is blocked where the agent supports a block. On Copilot that is the class Guard can stop. Shell and file there are advisory.
disable guard hooks
The agent trying to turn Guard off is blocked. Quitting the menu bar app does not turn the hooks off either.
Nine rule packs
Each pack is a set of deterministic rules. The same action gets the same decision.
Git history
Force pushes, history rewrites and other history-destroying git actions.
Disk
Wipes, formats and recursive deletes that take out more than the task.
Database
Drops, truncates and unscoped deletes.
Containers
Destructive container actions.
Kubernetes
Deletes and other cluster-wide changes.
Cloud
Destructive cloud API calls.
IaC
Applies that tear infrastructure down.
Host and self protection
Attempts to disable Guard or rewrite its hooks.
git push --force origin main
That one is a hold, not a silent pass. The card shows the command, the pack and two buttons. Deny and main stays. Allow and it runs. Nothing runs while the card is open. No language model picks the button.
Request Guard betaGet the block before the agent does.
Invited beta. Free Lookout. Limited spots. Three referrals put you in the front half of the queue.
Request Guard beta