jiangkoumo

Local, fail-closed policy enforcement and human approval for MCP tool calls.