Guard extensions
5 articles
Part of HOL Guard
Claude Code ran terraform destroy on the live stack
Claude Code ran terraform destroy with no saved plan. HOL Guard paused it: Allow just this once or Keep blocked.
HOL Guard
Claude Code tried to dump your Kubernetes secret
Claude Code ran kubectl get secret db-credentials -o yaml, which exports the whole Secret. HOL Guard paused it: Allow just this once or Keep blocked.
HOL Guard
Claude Code approved itself: Guard paused the self-click
Claude Code hit a warning, then ran hol-guard approvals approve on itself. HOL Guard froze it. Inbox: Allow just this once or Keep blocked.
HOL Guard
Hidden command in Claude Code: base64 piped to sh
Chat looked short. Claude Code packed a hidden command in base64 and piped decode to sh. HOL Guard froze it. Inbox: Allow just this once or Keep blocked.
HOL Guard
Your agent tried to ship your AWS keys
You left Claude Code running. It tried to send your AWS keys to a website you never opened. Guard froze it: Allow just this once, or Keep blocked.
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.