HOW GUARD WORKS

The command does not run yet

Claude Code goes to force-push main. The hook fires first. Guard holds the push. You Deny. Main stays.

1. Install the menu bar app and sign in

macOS Apple Silicon, Debian and Ubuntu via apt, Windows beta. VS Code companion and a Codex plugin. Sign-in is a verified email. The invited beta is free Lookout.

2. The hook sees the action

Claude Code and Codex can block shell, file and MCP. Copilot can block MCP. Shell and file on Copilot are a warning, not a stop. Cursor, Windsurf, Gemini CLI, Grok, Cline and Devin hook in. The block depends on that agent.

3. A pack matches

Filesystem catches the .env write. Git history catches the force-push. Disk catches rm -rf. Host and self protection catches an attempt to disable Guard. Database, containers, Kubernetes, cloud and IaC cover the rest. The decision is a rule. No language model.

4. Block, or the card

A deny stops the action. A hold shows Allow and Deny. The force-push waits. Deny and it never runs.

5. Quit the app. The hooks stay.

Closing the menu bar does not remove the hook. The next rm -rf is still blocked.

Request Guard beta

Limited spots. Referrals move you up the queue.