I built an open-source tool called PolicyApprovalGate . It uses local rules to deny commands or require confirmation immediately before Claude Code or Codex CLI runs a Bash command. nobuo-miura / PolicyApprovalGate A rule-based PreToolUse hook for Claude Code and Codex CLI that denies dangerous Bash commands, asks for confirmation on risky ones, and audits every call — no AI/LLM required. P...