Ship of Theseus License
Config manager for Claude Code when dotfiles already handle this.

License-aware Docker pulls when Harbor's auth system falls short.
Commercial software vendors distributing containerized products
Harbor · Docker Hub · GitHub Container Registry
I built Breakwater to solve a problem I had at Honeybadger: managing Docker image access for customers who purchase a license to our software. It sits in front of a Docker registry and authorizes pulls based on whether the authenticated user has access to the requested image, or even certain image tags.
I had originally intended to use Harbor, but the authorization system it had didn't quite match what I wanted, so I decided to build exactly what I wanted. I started using Claude Code over the Christmas break with this as my first real project letting the AI do the work, and the next thing I knew I had a new side business. ;)
Let me know what you think!
Config manager for Claude Code when dotfiles already handle this.
Guided authorization workflow beats writing Zanzibar schemas by hand.
Host-side credential enforcement for containerized agents before they leak your AWS keys.
Dockerizes pip builds to stop credential theft during install.
Enterprise auth for MCP when the protocol itself has no security layer built in.
It flags concrete dangerous patterns (example: ADD COLUMN with DEFAULT) and prints step-by-step safe alternatives instead of vague warnings. The embedded Rhai-based custom checks are a smart move — teams can encode org policies — but usefulness will depend on CI integration and the breadth/precision of its rule set.