A deterministic, allow-listed agent that blocks disallowed actions and requires explicit approval for sensitive ones. Runs entirely in your browser.
Known limitations: allow-list and approval set are fixed Python/TS constants, not
a configurable policy engine. See the project
README for the full write-up and the Python CLI version.