This project moved to github.com/CJHwong/agent-seatbelt under
hooks-opf/.
The new version adds:
- PostToolUse blocking — catches PII in tool responses before the LLM sees them next turn, in addition to the prompt-side check.
- Codex support — auto-detects
~/.codex/and wires hooks there too. - Block-level tiers —
PII_BLOCK_LEVEL=off|relaxed|standard|strictto choose what fires. - Per-prompt bypass — prefix a prompt with
pii:offto skip the check once.