Install with brew (macOS) or scoop (Windows). Blocks destructive commands, secret exfiltration, and unauthorized tool use across every AI coding agent on a machine.