Guided first use
Try seatbelt-guard command protection
Reviews seatbelt commands that remove or weaken the guardrail it installs for coding agents: removing its hook, installing it so a crashing Follow the three steps below with your own setup — nothing on this page runs on your machine or changes a policy.
Step 1 · Check fit
What this coverage governs
Reviews seatbelt commands that remove or weaken the guardrail it installs for coding agents: removing its hook, installing it so a crashing hook fails open, and editing agent settings.
External — off until you opt in
This coverage stays off until you explicitly enable it from your Guard workspace controls. Reading this page never changes your policy; activation happens in Guard itself.
Harness support
Not documented yetNot tested against a specific agent harness. The fixture evaluates command strings (53 cases) and does not run any agent. seatbelt itself installs a hook for Claude Code.
Prerequisites
Not documented yetGuard with this extension enabled. To use seatbelt itself you need the seatbelt-guard package from PyPI (version 0.1.5 was reviewed).
Known limitations
Reviewed as supportedLimitations are copied from the reviewed catalog facts. Contributor-supplied limitation notes are not independently verified. Launches through python -m seatbelt, pipx run or uvx are not matched. Pinned to seatbelt 0.1.5; options added later are not covered. Stop or remove: Disable the extension in Guard and its rules stop matching. If you only disable one permission, matching commands are blocked instead of reviewed.
- Coverage is limited to the reviewed operations and the surrounding Guard policy.
- A maintainer profile is not a security certification or an official upstream endorsement.
- Coverage is limited to the reviewed operations and the surrounding Guard policy.
- A maintainer profile is not a security certification or an official upstream endorsement.
Catalog version 1.0.0 · source snapshot 54b61c819e
Step 2 · Set up
Install and activate
New to Guard? Start with Install Guard. Already installed? Skip install — this coverage stays off until you enable it from your workspace controls.
Activation happens in your Guard workspace. This page links to it; it never enables the coverage for you.
Install
The source ships in HOL Guard's extension catalog and is opt-in, so it needs no separate install. seatbelt itself is installed separately: pipx install seatbelt-guard (or pip install seatbelt-guard).
Activation
The extension is opt-in: it stays off until you enable it in Guard. Once on, its three rules are in review mode by default.
Step 3 · Verify the result
Run a safe test and compare
Safe fixture inputs
With the extension enabled, in a throwaway project, have the agent propose "seatbelt uninstall claude-code --write" and decline when Guard asks for review. Do not approve it: approving would really remove the hook.
Expected outcome
Not documented yetGuard shows a review on seatbelt uninstall --write and install --write, and a policy_bypass (high) review on fail-open installs. Without --write (previews) and help commands are not flagged. Shortened options such as --wr and --no-on are matched.
Did it work?
Sign in to record an honest self-report. It is stored as your report — never as a verified evaluation.
Sign in to reportTurn it off or recover
Reviewed as supportedDisable the extension in Guard and its rules stop matching. If you only disable one permission, matching commands are blocked instead of reviewed.