Runtime Guard is a free, local-first MCP server that enforces policy on file and shell actions before execution. No account required. It provides a local GUI for easy policy configuration, flags dangerous content at write time and blocks at execution and it offers a single-button security posture config for AI agents.