Laya guard

About

laya-guard checks each coding agent tool call locally and decides whether to approve it, send it for review, or block it. Regex policies catch known dangerous patterns first, simple commands like ls and git status skip the model, and everything else goes to a small local model that runs on a laptop CPU. Because the check is local, commands, directories, and tokens are not sent to third parties, and hooks exist for 11 agents including Claude Code, Codex, and Cursor.