nah is a local safety guard for Claude Code. It runs before tool use and classifies actions by what they actually do, so safe operations can proceed, ambiguous operations ask for confirmation, and clearly dangerous operations are blocked. It protects Bash commands, file reads and writes, edits, searches, notebook edits, and MCP tools using deterministic local rules with no package install or network call required by default.