A swarm that never says no is a liability. Guard exists to stop work that shouldn’t ship, and it answers only to you.
What Guard checks
Secrets and keys in any change.
Dependencies with known vulnerabilities.
Licences that clash with yours.
Your own rules, written as plain policy files.
Why no override
If one agent could overrule Guard, a busy run would learn to. So only a person can lift a block, and the decision is logged.

