Regen-dev

Native safety hooks for Claude Code — blocks destructive commands, enforces tool-call budgets, guards file reads, masks secrets, and audits every agent action. Fail-closed C++ daemon with extensible rule engine.