You're probably running Claude Code with `--dangerously-skip-permissions`. Or Codex in full-auto. Or an OpenClaw agent with unsupervised shell access.

Nothing stops a hallucination from running `rm -rf ~` or reading your SSH keys while you're getting coffee. I built Rampart after my own agent nearly nuked a directory on my home lab.

It checks every command against YAML rules before it executes. Dangerous stuff gets blocked. Everything gets logged.

    brew install peg/rampart/rampart
    rampart setup claude-code

Two commands, runs locally, no account. Works with Claude Code, Codex, Cline, Cursor, or anything with a CLI. Go, Apache 2.0.