stop-that-shit

Why we included this project

Anyone who has watched a coding agent quietly generate a SHA-256 checksum, an extra guard, or a full test run nobody asked for will recognize the problem here. Stop That Shit turns those unrequested additions into enforceable boundaries: you declare what is authorized in review or change modes, optionally limiting files, dependencies, hashes, and subagent budgets, and the guard checks those limits on the covered hook paths, returning a permission-denied stamp when an action crosses the line. It ships with adapters for Codex, Claude Code, OpenCode, and Hermes Agent CLI, so the same task-boundary core works across the agents your team already uses. The pitch is simple: instead of writing ever-longer AGENTS.md rules and hoping the agent obeys, you get a local-first guard that actually stops the scope creep.