Fail-closed egress gate for Claude Code on Linux, packaged as an agent skill.
- binary-level gate at /usr/local/bin/claude and /usr/bin/claude with the real
binary pinned under /opt/claude-real, so cron, Python, systemd and absolute
paths are covered
- exit address and country checked before every start; mismatch or timeout
refuses with exit 77 and never falls back to a direct connection
- optional kernel jail (systemd scope, IPAddressDeny=any) for the whole process
tree, with loopback, proxy upstream, DNS resolvers and operator CIDRs allowed
- self-heal after package updates that rewrite /usr/bin/claude
- installer with dry-run, backups and uninstall; verify/verify --deep/status/drill
- sandboxed self-test suite, shellcheck and leak scanner in CI
yinyues2
c64ed98eb1