vaaraio avatar

vaara-governance

Runtime tool-call governance for Claude Code. Layer-1 deny rules on every tool the hook sees (shell, file mutation, reads of credential material, subagent spawn, scheduling, remote triggers, cross-session messages, harness config writes). Layer-2 conformal risk classifier on mcp__* tools. Hash-chained SQLite audit trail at ~/.vaara/trail/audit.db.

GitHub stars
15

Install

/plugin install vaara-governance@vaara

Run it inside Claude Code after adding the marketplace with /plugin marketplace add vaaraio/vaara.

Sponsors

Details

Marketplace
vaaraio/vaara
Source
plugins/claude-code-vaara-governance
Author
Henri Sirkkavaara
Category
Security