See what Guard checks before an action runs, what stays local, what Guard Cloud adds, and how review, evidence, supply-chain protection, and fleet controls fit together.
Guard evaluates actions before side effects occur.
Intercept
Runtime decision
Attempted action
npm install @workspace/cli --workspace
Why this was paused
The request reaches outside the current workspace policy before the package manager runs.
Matched policy / risk
Workspace package boundary
Medium risk
Attempted action
npm install @workspace/cli --workspace
Matched policy
Workspace package boundary
Decision
Blocked before execution
Redacted receipt
Recorded locally with an integrity hash. Raw detail is redacted.
Next action
The request remains available for a deliberate review decision.
Receipt ID
receipt-marketing-intercept-1
Installs supported harness launchers and wrappers so Guard can evaluate actions before they run.
Checks supported shell, file, MCP, skill, prompt-sensitive, and package actions before side effects.
Inspects supported encoded command content without executing it.
Continues local policy checks when Guard Cloud is unavailable.
Layered policy from a single machine to a whole team.
Proof rules
Each rule matches a condition and enforces an action. Rules are evaluated in order.
Package is outside workspace policy and registry trust list.
MCP server is not in the approved server list.
File path matches sensitive surface pattern.
Credential has not been re-approved within the retention window.
Package trust score is below the configured threshold.
Tool is in the approved tool list and has a valid trust match.
Network request targets a known exfiltration endpoint.
Applies machine policy with project-level overrides for supported agent actions.
Blocks denied actions and warns when policy requires a human decision.
Detects and repairs supported policy integrity problems on the local machine.
Turns reviewed activity into suggested policy updates for an operator to accept or reject.
Shares reviewed policy decisions across authorized workspace members.
Pause, review, and decide with scoped actions that are signed and receipted.
Needs review
Requests waiting for a policy decision
npm install @workspace/cli
1dDeveloper workstation
npm install review-queue-mcp
1dDeveloper workstation
Needs review
Requests waiting for a policy decision
Selected request
Guard paused a package change before the tool could run it.
Read-only proof. Actions are demonstrated in the review preview above.
Remembered decisions
Decision scopes
Each decision can be scoped from a single item to a team-wide policy rule.
Decision actions
Allow or block at each scope. Every action is signed and recorded with a receipt.
Reuses scoped approval decisions across connected Guard sessions.
Lets teams review and assign Guard requests in a shared workflow.
Every decision is signed, receipted, and auditable. Sensitive fields are redacted.
Receipt summary
Timestamp
Actor
Harness
Asset
Action
Decision
Outcome
Decision replay
Blocked package install outside workspace policy. Decision applies to future matching requests at workspace scope.
Timeline and history
Custody timeline
Action intercepted before package manager execution.
Guard runtime · July 13, 2026 2:22 PM (UTC)
Matched workspace package boundary policy. Decision: block.
Policy engine · July 13, 2026 2:22 PM (UTC)
Receipt stored locally with integrity hash.
Evidence store · July 13, 2026 2:22 PM (UTC)
Receipt ID
rcpt-proof-7f3a2b8e1c
sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2
Raw detail
[redacted]
Safe payload
{
"action": "package-install",
"asset": "@workspace/cli",
"decision": "block",
"policy": "Workspace package boundary",
"redacted": true
}Keeps local receipts and exposes policy explanations and pending approvals.
Brings synchronized Guard activity together across connected sessions and machines.
Searches synchronized action and decision evidence in Guard Cloud.
Groups relevant Guard evidence into incident summaries for investigation.
Exports synchronized Guard activity for offline review and retention workflows.
Creates controlled records that teammates can use during review and response.
Maintains team cases and an auditable history of supported administrative and review actions.
2 capabilities
Supply-chain review
An illustrative review state using Guard's shipped firewall capabilities.
MCP and Skill drift visibility
Shows changes to connected MCP servers and skills so operators can review drift.
Cloud Firewall UI
Reviews supported MCP, skill, and package changes in the Guard Cloud firewall.
Shows changes to connected MCP servers and skills so operators can review drift.
Reviews supported MCP, skill, and package changes in the Guard Cloud firewall.
7 capabilities
Machine continuity
Enforce locally
Policy checks stay on each protected machine.
Pair securely
Connect interactive machines, remote hosts, and CI runners.
Route team work
Bring connected evidence and review into shared workflows.
Connects a local Guard installation to Guard Cloud with a short-lived pairing flow.
Connects supported remote and automated machines without an interactive browser on the host.
Organizes Guard resources in workspaces with role-based access.
Provides non-human workspace identities for supported automation.
Assigns accountable owners to supported Guard resources.
Manages workspace billing and plan limits for Guard Cloud teams.
Provides workspace administration and supported team-level exports.
6 capabilities
Route the signal, keep the context
Guard review or incident
A supported event carries its evidence and policy context.
Sends Guard activity digests and supported operational notifications.
Routes supported Guard notifications and review actions through Slack.
Connects supported Guard review and evidence workflows with GitHub.
Connects supported Guard case and review workflows with Jira.
Routes supported Guard incidents into PagerDuty response workflows.
Delivers supported Guard notifications through email and outbound webhooks.
Local enforcement is free and works without Cloud. Pro and Team add sync, alerts, and shared policy.
3-day trial
$12/mo billed annually
3-day trial
$24/mo billed annually
Guard installs on macOS, Linux, and Windows and supports the AI coding agents below.
Guard is built for serious runtime security without harsh dashboarding or forced upgrade pressure.
Policy checks run on your machine. Guard Cloud adds sync and team operations, but local enforcement works without it.
Guard evaluates shell, file, MCP, skill, prompt-sensitive, and package actions before side effects occur.
Receipts, explanations, and approval decisions are captured locally and can be synchronized to Guard Cloud.
Local Guard is useful on its own. Cloud tiers add capabilities without degrading the local experience.
Raw self-assessment answers are retained for up to 90 days. Private report links expire after 30 days. Report delivery does not opt you into marketing.
See what Guard checks before an action runs, what stays local, what Guard Cloud adds, and how review, evidence, supply-chain protection, and fleet controls fit together.
Guard evaluates actions before side effects occur.
Intercept
Runtime decision
Attempted action
npm install @workspace/cli --workspace
Why this was paused
The request reaches outside the current workspace policy before the package manager runs.
Matched policy / risk
Workspace package boundary
Medium risk
Attempted action
npm install @workspace/cli --workspace
Matched policy
Workspace package boundary
Decision
Blocked before execution
Redacted receipt
Recorded locally with an integrity hash. Raw detail is redacted.
Next action
The request remains available for a deliberate review decision.
Receipt ID
receipt-marketing-intercept-1
Installs supported harness launchers and wrappers so Guard can evaluate actions before they run.
Checks supported shell, file, MCP, skill, prompt-sensitive, and package actions before side effects.
Inspects supported encoded command content without executing it.
Continues local policy checks when Guard Cloud is unavailable.
Layered policy from a single machine to a whole team.
Proof rules
Each rule matches a condition and enforces an action. Rules are evaluated in order.
Package is outside workspace policy and registry trust list.
MCP server is not in the approved server list.
File path matches sensitive surface pattern.
Credential has not been re-approved within the retention window.
Package trust score is below the configured threshold.
Tool is in the approved tool list and has a valid trust match.
Network request targets a known exfiltration endpoint.
Applies machine policy with project-level overrides for supported agent actions.
Blocks denied actions and warns when policy requires a human decision.
Detects and repairs supported policy integrity problems on the local machine.
Turns reviewed activity into suggested policy updates for an operator to accept or reject.
Shares reviewed policy decisions across authorized workspace members.
Pause, review, and decide with scoped actions that are signed and receipted.
Needs review
Requests waiting for a policy decision
npm install @workspace/cli
1dDeveloper workstation
npm install review-queue-mcp
1dDeveloper workstation
Needs review
Requests waiting for a policy decision
Selected request
Guard paused a package change before the tool could run it.
Read-only proof. Actions are demonstrated in the review preview above.
Remembered decisions
Decision scopes
Each decision can be scoped from a single item to a team-wide policy rule.
Decision actions
Allow or block at each scope. Every action is signed and recorded with a receipt.
Reuses scoped approval decisions across connected Guard sessions.
Lets teams review and assign Guard requests in a shared workflow.
Every decision is signed, receipted, and auditable. Sensitive fields are redacted.
Receipt summary
Timestamp
Actor
Harness
Asset
Action
Decision
Outcome
Decision replay
Blocked package install outside workspace policy. Decision applies to future matching requests at workspace scope.
Timeline and history
Custody timeline
Action intercepted before package manager execution.
Guard runtime · July 13, 2026 2:22 PM (UTC)
Matched workspace package boundary policy. Decision: block.
Policy engine · July 13, 2026 2:22 PM (UTC)
Receipt stored locally with integrity hash.
Evidence store · July 13, 2026 2:22 PM (UTC)
Receipt ID
rcpt-proof-7f3a2b8e1c
sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2
Raw detail
[redacted]
Safe payload
{
"action": "package-install",
"asset": "@workspace/cli",
"decision": "block",
"policy": "Workspace package boundary",
"redacted": true
}Keeps local receipts and exposes policy explanations and pending approvals.
Brings synchronized Guard activity together across connected sessions and machines.
Searches synchronized action and decision evidence in Guard Cloud.
Groups relevant Guard evidence into incident summaries for investigation.
Exports synchronized Guard activity for offline review and retention workflows.
Creates controlled records that teammates can use during review and response.
Maintains team cases and an auditable history of supported administrative and review actions.
2 capabilities
Supply-chain review
An illustrative review state using Guard's shipped firewall capabilities.
MCP and Skill drift visibility
Shows changes to connected MCP servers and skills so operators can review drift.
Cloud Firewall UI
Reviews supported MCP, skill, and package changes in the Guard Cloud firewall.
Shows changes to connected MCP servers and skills so operators can review drift.
Reviews supported MCP, skill, and package changes in the Guard Cloud firewall.
7 capabilities
Machine continuity
Enforce locally
Policy checks stay on each protected machine.
Pair securely
Connect interactive machines, remote hosts, and CI runners.
Route team work
Bring connected evidence and review into shared workflows.
Connects a local Guard installation to Guard Cloud with a short-lived pairing flow.
Connects supported remote and automated machines without an interactive browser on the host.
Organizes Guard resources in workspaces with role-based access.
Provides non-human workspace identities for supported automation.
Assigns accountable owners to supported Guard resources.
Manages workspace billing and plan limits for Guard Cloud teams.
Provides workspace administration and supported team-level exports.
6 capabilities
Route the signal, keep the context
Guard review or incident
A supported event carries its evidence and policy context.
Sends Guard activity digests and supported operational notifications.
Routes supported Guard notifications and review actions through Slack.
Connects supported Guard review and evidence workflows with GitHub.
Connects supported Guard case and review workflows with Jira.
Routes supported Guard incidents into PagerDuty response workflows.
Delivers supported Guard notifications through email and outbound webhooks.
Local enforcement is free and works without Cloud. Pro and Team add sync, alerts, and shared policy.
3-day trial
$12/mo billed annually
3-day trial
$24/mo billed annually
Guard installs on macOS, Linux, and Windows and supports the AI coding agents below.
Guard is built for serious runtime security without harsh dashboarding or forced upgrade pressure.
Policy checks run on your machine. Guard Cloud adds sync and team operations, but local enforcement works without it.
Guard evaluates shell, file, MCP, skill, prompt-sensitive, and package actions before side effects occur.
Receipts, explanations, and approval decisions are captured locally and can be synchronized to Guard Cloud.
Local Guard is useful on its own. Cloud tiers add capabilities without degrading the local experience.
Raw self-assessment answers are retained for up to 90 days. Private report links expire after 30 days. Report delivery does not opt you into marketing.