agentops ou railguard

Enterprise guardrails, delivery lifecycle, and self-evolution for Claude Code. Wraps every session in 7 security layers (path validation, command validation, injection scanning, credential redaction, exfiltration detection), structures work with the STAR methodology, and orchestrates full project builds from vision to merged PR through an 8.5-phase lifecycle with TDD enforcement, wave-based parallel execution, and two-stage code review. Includes 37 commands, 44 hooks, 12 specialist agents, 49 templates, and 32+ feature flags.

Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude unrestricted access, Railguard sits in the middle. It intercepts every tool call — Bash, Write, Edit, Read — and makes policy-based decisions: allow safe commands instantly, block dangerous ones automatically, and ask for human approval when it's not sure. Out of the box, Railguard comes with 29 default rules covering destructive operations like terraform destroy, rm -rf, DROP TABLE, and git force-push. It detects evasion attempts (base64 encoding, chr construction, variable substitution, shell wrapping), restricts file access with path fencing (blocking ~/.ssh, ~/.aws, /etc), snapshots every file write for one-click rollback, and logs every decision to a structured audit trail. Everything is customizable through a simple railguard.yaml file in your project directory.