Guardian-Agent

Tamper-evident ed25519-signed hash-chained audit log, in-process emergency stop, two-key human-in-the-loop approval gates, capability-class scoping with per-class rate buckets, Yellow-line tripwires on suspicious tool-call combinations, honeytokens with zero false positives by construction, external chain attestation, and dead-man's heartbeat. TypeScript reference implementation of the language-neutral guardian-agent SPEC; consumed internally by @flowdot.ai/cli and @flowdot.ai/mcp-server, but designed to be embedded in any agent runtime.