guardrails

security hooks for the pi coding agent

Northwind incident comparison

× without guardrails production guardrails disabled
with pi-guardrails default policies active
replaying both responses independently