Tiny proxy + SDK to detect and block prompt‑injection & exfil attempts. One‑line install, CI safety score, optional telemetry. CPU‑only, open source.