Intercept
Every agent action is caught before it executes — file writes, shell commands, API calls, database queries. Nothing gets through without passing Railguard first.
Hooks directly into Claude Code's native hooks system. No changes to your agent, your prompts, or your workflow.
Block
Configurable blocklist stops destructive commands cold. terraform destroy, DROP TABLE, push --force — define what's off-limits.
Pattern matching, command-level rules, and glob support. Works against any shell command, not just known bad actors.
Approve
Flag risky actions for human sign-off before they run. Agent pauses, you review, you decide. No agent code changes required.
Approval queue in the terminal or via webhook. Configurable per-command or per-risk-level. Timeout with deny as default.
Trace
Full structured audit log of every action, every session. Know exactly what your agent did, in what order, and why.
JSON output, session-scoped logs, timestamps, command args, and exit codes. Pipe to your existing observability stack.
Rollback
Undo any agent action in one command. railguard rollback [id] and you're back. Works for files, config edits, and more.
Automatic state snapshots before every intercepted write. Rollback is instant, atomic, and logged.
Policy
All rules defined in YAML, version-controlled alongside your code. One file, all your guardrails, always in sync with your team.
Supports blocklists, allowlists, approval thresholds, resource tagging, and environment-scoped overrides.