HOL Guard
Open source runtime security layer for AI coding agents
From the HOL Guard blog
Published by HOL Guard, not by us. Every card opens the original post.
Claude Code approved itself: Guard paused the self-click
Claude Code tried to approve itself with hol-guard approvals approve. HOL Guard paused it. Allow just this once or Keep blocked.
hol.org
Hidden command in Claude Code: base64 piped to sh
Claude Code packed a hidden command in base64 and piped decode into sh. HOL Guard paused it. Allow just this once or Keep blocked.
hol.org
Keep a Codex Task on Track Through Compaction with Context Guard
A practical Context Guard walkthrough: define requirements, compact a Codex task, recover the checklist, and verify the finished document.
hol.org
Your agent tried to ship your AWS keys
Claude Code tried to send your AWS keys off the laptop. HOL Guard paused the curl. Allow just this once or Keep blocked. Keys stay put until you tap.
hol.org
HOL Guard 3.0: Rust authority, extension-first controls, honest harness contracts
HOL Guard 3.0 puts PreToolUse on a version-matched Rust path with no Python semantic fallback, makes Local Extensions the capability vocabulary for managed-restrictive Control Sets, and keeps sync paused from meaning unprotected. Pin tip 3.0.113; do not pin yanked 3.0.0.
hol.org
BREAKING: WatchGuard Fireware iked type-confusion on IKE_AUTH
How to fix CVE-2026-19315: upgrade Fireware OS to 2026.2.2, 12.12.2, or 12.5.20
hol.org