Safety guardrails for ai coding agents and human terminal commands

This is a fork of Shellfirm by kaplanelad. This blocks all commands completely.

4-5M tokens/month saved. Vault+RTK+context-mode+shellfirm. /sm init activates everything.