🔌

vaara-governance

🔌Plugin

vaaraio/vaara

What it does

Runtime tool-call governance for Claude Code. Layer-1 regex deny on Bash/WebFetch/WebSearch. Layer-2 conformal risk classifier on mcp__* tools. Hash-chained SQLite audit trail at ~/.vaara/claude-code/audit.db.

🏪

Part of

vaaraio/vaara

security

Installation

Add marketplace in Claude Code:

/plugin marketplace add vaaraio/vaara

Step 2. Install plugin:

/plugin install vaara-governance@vaara

AddedJul 14, 2026

View on GitHub Back to Plugins

More from this repository1

🏪

vaaraio/vaara🏪Marketplace

Open-source evidence layer for AI governance. Gates every AI agent tool call against your policy and writes a hash-chained execution record an auditor verifies offline, without trusting the operator. Root-agnostic, and binds to a TPM 2.0 or SEV-SNP hardware root when present. Your environment, no SaaS, no telemetry. AGPL-3.0.