pretooluse-hook
Guardrails for AI agents, with a receipt. Blocks destructive tool calls before they run and signs every decision into a hash-chained record anyone can verify with an open-source tool.