A Claude Code mod that holds runaway agent spend before it happens: it reads your plan's live 5-hour and weekly usage, then asks before subagent fan-out, heavy-context prompts and retry loops - and refuses when nobody can answer. Local and privacy-minimal (no network, no processes, never stores prompt text), fails open, and /agent-guard report shows what it did. MIT, one plugin install command.