vaara-governance
claudeRuntime tool-call governance for Claude Code. Layer-1 deny rules on every tool the hook sees (shell, file mutation, reads of credential material, subagent spawn, scheduling, remote triggers, cross-session messages, harness config writes). Layer-2 conformal risk classifier on mcp__* tools. Hash-chained SQLite audit trail at ~/.vaara/trail/audit.db.
2 commands · hooks
15