claude-code-security-mods

Local deterministic pattern bridge for new file content. Not the official Claude Security plugin and not a data-flow scanner.

Appends architecture rules as Claude-only context on every prompt, and drops prompts that explicitly tell Claude to ignore or bypass security rules.

Default-closed eval gate. External Promptfoo runs in CI are the real gate; this mod is defence in depth only.

Short-lived credential gate. Fetches a token from a configured broker only; it never invents a token and never falls back to a long-lived credential.

Redacts secret patterns from prompts, shell commands and shell output, blocks writes that contain secrets, and denies reads and mentions of secret files.

Per-session token tally. Records usage totals in the store and prints the turn total; it is not a token stream or a server-side audit chain.

Local deterministic guard for dangerous Bash and PowerShell commands. Not the Rulebricks product; no network calls.

Observable audit trace only. Records tool calls and turn completions to a capped store log; it never blocks work.