Useful framing for anyone letting coding agents touch local runtimes. The shell and secret-file controls are the parts I would check first before trusting an agent workflow.
on HOL Guard — local-first runtime control for AI coding agents · 39d ago