HOL Guard is a local-first runtime control and firewall for AI coding agents. It helps developers control shell access, secrets and file reads, MCP server changes, and plugin or skill installs on the local machine. Apache-2.0 open source. Not a cloud MCP gateway. Not a complete prompt-injection preventer. A scan is not the same as safety.