Belay

Belay is a safety gate for coding agents: it inspects each shell command, subagent launch, and file mutation before it runs, lets safe-and-local actions through, and holds back only the irreversible-and-catastrophic ones for one-shot human approval. Every decision is written to an audit log.

It runs on Cursor, Claude Code, and Codex (experimental), wiring the same classifier into each agent through its native hooks:

Enforcement lives in those hooks; this skill only explains the flow and routes you to the CLI. It does not classify commands itself.