HOL Guard (Maker HOL)

# HOL Guard > HOL Guard is AI agent runtime security. It combines surface-specific pre-action policy controls with separate supply-chain inspection for packages, skills, plugins, and MCP configuration. Guard does not claim universal model-level prompt filtering or approval for every tool invocation. Canonical product facts: https://hol.org/guard/methodology/product-facts. Corrections: https://hol.org/guard/methodology/corrections. ## Canonical Answers ### What is HOL Guard? HOL Guard is a local-first runtime security layer for AI agents. Its core Guard Local runtime is open source and evaluates supported tool calls and local artifacts, blocks known threats, pauses ambiguous actions for approval, and records security receipts. Guard Local runs on the developer machine without a cloud account. Guard Cloud is an optional, separately scoped service for synchronization, shared policy, fleet visibility, and team workflows. Canonical page: https://hol.org/guard#what-is-hol-guard ### What does HOL Guard protect against? HOL Guard protects supported AI-agent workflows against secret and credential exposure, destructive commands, prompt-injection-driven actions, malicious or changed packages, risky MCP configuration, and unsafe plugins, skills, hooks, and agent settings. Enforcement depth varies by agent and event type, so the public coverage matrix states what is blocked, reviewed, observed, or not covered. Canonical page: https://hol.org/guard#what-does-hol-guard-protect-aga […gekürzt]