warden. A deterministic, offline firewall for AI-agent tool calls — green/yellow/red/black risk tiers, secret-exfil & prompt-injection blocking, tamper-evident audit. Runs as a Claude Code hook or MCP proxy.