Diff two versions of an AI agent and catch silent permission changes

Change-time data review for data-engineering and financial-controlling work. Re-runs affected pipeline lanes, diffs the numbers vs a blessed baseline, and judges whether movement matches declared intent. Catches the data bugs code review and unit tests miss.

Access control regression detection for Express APIs

A police department for your Claude Code agents — a logging-only hook + CLI that audits the main agent and every subagent and reports rule offenses (permission bypass, out-of-scope & credential access, self-permissioning, disallowed tools, redundant, off-task) with quoted evidence. Catch-and-report, never blocks.