A cooperative gate for the shell commands AI coding agents run.
Previews the blast radius, backs up first, applies an allow/ask/deny policy, escalates repeated destructive attempts, and logs everything to an append-only audit trail. Claude Code and Cursor, live-tested — including the circuit breaker tripping under a real agent session.
A windshield, not a sandbox — and we document exactly where the boundary is.
cargo install termaxa
termaxa check "rm -rf /" # works immediately — no setup, no project config→ termaxa/termaxa — source, docs, releases → termaxa.com — the tour → Security & threat model — what it does not protect against, honestly