HOL Guard is local-first runtime control for AI coding agents. It governs shell execution, secret-file reads, MCP server changes, and plugin/skill installs. Apache-2.0 open source by Hashgraph Online. Not a cloud MCP gateway.