sondera-ai/sondera-coding-agent-hooks: Cedar Policy Language Security Layer for Claude Code, Cursor, Gemini CLI
GitHub·high signal
Sondera hooks intercept every shell command, file operation, and web request from coding agents and adjudicate them with the Cedar Policy Language — the same formal policy engine used in AWS. Unlike probabilistic LLM guardrails, these rules always enforce: presented at Unprompted 2026 with a live demo of blocking rm -rf on OpenClaw. Rust binaries, stateful trajectory stores, works across Claude Code, Cursor, GitHub Copilot, and Gemini CLI.