guardrails-md
opencode plugin: a System One decision model judges every bash command before it runs — destructive / credentials / your guardrails.md policy
12 ★ on GitHub
What it is
Stops your coding agent from running the bash command you'd regret.
The homepage listed on the repository, npmjs.com, puts it like this: npm | Sign In
Where the decision sits
guardrails-md calls the hosted decision API rather than running its own weights. That keeps the project small and means its behaviour moves whenever the vendor ships a new model version. It also means an API key and a network round trip sit in the path of every decision.
Models it references: Jev.
How active it is
Created 2026-10-04, last pushed 2026-10-22, 12 stars and 3 forks when we read it on 2026-11-02. Everything in this category is weeks old at most, so a stale push date means something different here than it would on a mature project. Check the repository before you depend on it.
Find out what your data actually supports
We turn your historical decisions into a frozen test set, then tell you which model, which threshold, and how much of it you can safely automate.