{
  "markdown": "<p align=\"center\">\n  <img src=\"../assets/raven-banner.png\" alt=\"Raven — Guardrails before you ship.\" width=\"800\"/>\n</p>\n\n# Raven Guard\n\n> Claude Code implementation of the Raven production protection layer.\n> Part of the [Raven platform](https://github.com/giggsoinc/raven-core). MIT License.\n> Built by [Giggso Inc](https://github.com/giggsoinc).\n\n*Guardrails before you ship.*\n\n---\n\n## What Is This?\n\nRaven Guard is the production protection layer — a separate product from Raven Core.\n\n| | Raven Core | Raven Guard |\n|---|---|---|\n| **Audience** | Developers | DevOps, Architects, Security |\n| **Job** | Coding discipline | Production protection |\n| **Triggers** | Dev actions | System events |\n| **Blocks** | Bad code patterns | Destructive operations |\n\n---\n\n## The 6 Guard Agents\n\n| Agent | Watches | Hard Blocks | Approval Flow |\n|---|---|---|---|\n| guard-git-watch | Deletions, force push, config | Force push, config wipe | Flagged deletions |\n| guard-db-watch | Truncations, mass deletes, schema | TRUNCATE, DROP | >100 rows, index delete |\n| guard-infra-watch | Terraform, S3, VMs, network | State file, destroy | S3 delete, VM terminate |\n| guard-observability-watch | Logs, metrics, access patterns | — | P1 page, P2 email |\n| guard-firewall-watch | Firewall rules, ports, egress | 0.0.0.0/0, RDP, SSH public | Rule changes |\n| guard-incident-manager | All Guard alerts | — | P1/P2/P3 + SLA |\n\n---\n\n## How It Works\n\n```\nSystem event detected (git push, DB query, infra change, firewall rule)\n      ↓\nGuard agent fires\n      ↓\nDestructive? → HARD BLOCK + escalation\nApproval needed? → Email Prism7 + auto PR\n      ↓\nFirst responder approves/rejects\n      ↓\nFull audit trail in Git history\n```\n\n---\n\n## Intentional Deletions\n\n```bash\ngit commit -m \"refactor: remove legacy module [GUARD:ALLOW-DELETE]\"\n```\n\nTriggers approval flow instead of hard block.\n\n---\n\n## Incident Severity\n\n| Level | SLA | Who Gets Notified |\n|---|---|---|\n| P1 Critical | 15 min | Escalation contact SMS + Prism7 CRITICAL |\n| P2 High | 1 hour | Prism7 HIGH + team lead |\n| P3 Medium | 24 hours | Prism7 daily digest |\n\n---\n\n## Audit Trail\n\nAll events encrypted and compressed → S3 / GCS / Azure Blob / OCI:\n\n```\ns3://bucket/raven/{project}/{dev}/{github_id_or_tag}/{date}.log.gz.enc\n```\n\n---\n\n## Install\n\n```bash\ncd YourProject\nbash ../raven-guard/raven-guard-setup.sh\n```\n\nRequires [Raven Core](https://github.com/giggsoinc/raven) installed first.\n\n---\n\n## License\n\nMIT — [Giggso](https://giggso.com)\n",
  "bytes": 2488,
  "sha": "c64ab1395b9123bda1466771d48d1939ca947aa0bfe04f58ad08fc4cc5284d50",
  "repo_slug": "giggsoinc/raven-guard",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/plg_giggsoinc_raven_guard_raven_guard_f6a7c8c8/readme"
}