[ LE CONTRÔLE · embedded ]

Scan before you publish. Catch secrets and private detail first.

Content Guard is the publish gate embedded in brigade-cli: scan, redact, Git and PR checks, and a scrub path that fails closed on secrets and private identifiers. Use brigade guard for the full CLI, or brigade scrub as the out-of-the-box repo gate.

View on GitHub →

Part of the Brigade fleet · brigade.tools · escoffierlabs.dev

Content Guard GitHub stars Content Guard GitHub stars

[ WHAT IT DOES ]

Embedded in Brigade

brigade guard and brigade scrub ship with brigade-cli; no second install for the default path.

Fail closed on leaks

Policies for public-repo and personal content; findings block publish until reviewed.

Handoff and release gates

Hooks into handoff lint, release doctor, and pre-push style checks.

[ COMMANDS ]

brigade scrub Scan the working tree with the default public-repo policy.
brigade guard scan Full guard CLI: scan, redact, git, and PR checks.
brigade handoff lint --content-guard Gate pending handoffs before memory ingest.

Full reference on GitHub.

[ INSTALL ]

Install Content Guard, then wire it into Brigade when you want the station on your line:

Brigade itself: brigade.tools · pipx install brigade-cli

[ MORE FROM ESCOFFIER LABS ]

Local-first tools for AI coding agents

One kitchen, one brigade. Each tool does one job well, and they share one reviewed source of memory, config, and receipts.

Brigade One reviewed source of the MCP servers, tools, and memory your AI coding agents share, with a review gate and a receipt for every change. Memory Doctor Maintenance CLI for the file-based memory agents share: status, lint, ingest, compact. Skillet Production-tested skills for auditing, improving, and shipping repos with AI coding agents. Cloche Agent-neutral desktop capture: polished screenshots, stable JSON, optional MCP server. GraphTrail A local SQLite graph of your code, symbols, imports, and call edges, queryable over CLI or a read-only MCP server. Agent Pantry Mirror the browser auth and secrets you choose to the machine your agent runs on, sealed end to end. MiseLedger A local-first evidence graph over agent history, with session, file, git, and chat crawlers built in: full-text search, Markdown export, evidence bundles. Bootstrap Doctor Audit oversize agent bootstrap files and trim them into reference cards. Agent Notify Privacy-first push notifications from coding agents to Discord, Telegram, and Signal. Mise en Scene Turn repos, specs, and incident reports into interactive HTML/SVG explainers.

See the whole fleet at escoffierlabs.dev →