Portable, Rust-powered security harness for CLI coding agents. Blocks prompt injection, redacts secrets, pins MCP servers, audits every tool call.