Add ctxguard: hook-enforced context sanitization

Keeps credentials, company names, personal names and PII out of the model's context. Enforcement lives in Claude Code hooks rather than in instructions to the agent: a skill alone cannot protect anything, because by the time the agent reads a rule the surrounding context has already been sent. Credentials are removed irreversibly and marked. Entities from a user-supplied dictionary become stable aliases, rewritten back to real values on their way to disk and to the shell, so code and commands referring to them still work. Published from a clean tree; development history is not included.
2026-09-16 11:33:09 +03:00
commit 278ecca018
34 changed files with 5315 additions and 0 deletions
@@ -0,0 +1,9 @@
+{
+  "name": "ctxguard",
+  "version": "1.0.4",
+  "description": "Sanitizes the agent's context before it reaches the model: hard-blocks credentials, rewrites company names, people and PII into stable reversible aliases, and rehydrates them on write.",
+  "author": {
+    "name": "A.Shakhmatov",
+    "email": "dev@shakhmatov.com"
+  }
+}