Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OAP) policy before execution. Blocks unauthorized commands, dangerous file operations, and policy violations. All evaluation runs locally by default - zero network calls, works offline. Open-source (Apache 2.0). Includes three skills: - /aport-guardrails:claude-code — Set up guardrails and create a passport - /aport-guardrails:status — Check guardrail status and recent decisions - /aport-guardrails:openclaw — Set up guardrails for OpenClaw agents