laya-guard 0.5.0 adds AI attack simulation and file-tool hooks to guard Claude Code
Extreme_Ad5709 · reddit · 2026-10-17
The author of laya-guard, a local guardrail for coding agents, shipped 0.5.0 with several notable additions:
- AI attack simulator: reuse your existing Claude Code session as a coding agent in a virtual repo; proposed commands are evaluated without ever executing. Ships with 8 fixed scenarios (malicious script behind npm test, destructive command hidden by a comment, mixed command chains) — explicitly a test harness, not a guarantee.
- File-tool hooks: laya-guard install claude-code --files gates Read/Edit/Write calls against protect.yaml rules (reading /.ssh/idrsa → Review, writing authorizedkeys → Block), rule-based with no model cost, <5ms per check.
- Access tracking: activity on logs touched paths, footprint --suggest summarizes per project and recommends protect.yaml entries; macOS watch monitors files opened by agent processes (sudo, observe-only).
- Bypass fixes from community testing: 40k repeated curl inputs made a regex take 48s and time out — oversized input is now rejected upfront; long commands are evaluated in overlapping 4,000-char windows taking the strictest verdict; comments no longer sway the model's verdict.
Also new: hashed command storage and a local verdict dashboard.
More from coding & agent
- All technical work is becoming evals: engineers' job is building agent verification loops — rachittshah · 2026-10-17
- Cursor Cloud Agents can now build interactive canvases you can share as links — belce_dogru · 2026-10-17
- 20 free single-file HTML landing pages that let Codex reskin your whole app — Azra_Nysus · 2026-10-17
- You Can Generate 3D HTML Animations Directly in Runway's Agent Mode — CurieuxExplorer · 2026-10-17
- OpenAI Agents API weekly: 6-Astra Ultrafast, sandbox snapshots, idle-environment billing fix — OpenAIDevs · 2026-10-17
- Engineer uses Databricks Genie One for org discovery, not just SQL/BI — durlabha · 2026-10-17