Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.