HOL Guard - Local-first runtime control for AI coding agents

HOL Guard is local-first runtime control for AI coding agents. Installed on the machine, it can gate shell, secrets and file reads, MCP server changes, and plugin or skill installs, then route risky actions through local approvals and receipts. It is not a cloud MCP gateway and not a complete prompt-injection preventer. License: Apache-2.0. Docs: https://hol.org/guard