scope-guard

/plugin marketplace add DijitalPi/claude-plugins
/plugin install scope-guard@dijitalpi

The boundary is the enclosing git repository, or the working directory when there is no repository. A write inside it stays silent. A write outside it raises a confirmation naming both paths, and says so explicitly when the target sits inside a different repository — the case that quietly leaves changes in someone else's working tree and is found much later. Temp directories and ~/.claude are always allowed, and relative paths resolve inside by construction. The default is to ask rather than refuse, because a global config file or a sibling repository is often exactly what was meant; a setting turns it into a hard deny, or switches the check off without uninstalling.