![\"SigmaShake](\"https://docs.sigmashake.com/img/hero.png\")
\n \n\n \n \n \n
\n AI Agent Guardrails. Sub-2ms governance for every AI agent. Local-first.\n
\n\n\n ![\"npm](\"https://img.shields.io/npm/v/@sigmashake/ssg?color=CB3837&logo=npm\")
![\"npm](\"https://img.shields.io/npm/dm/@sigmashake/ssg?color=CB3837\")
![\"PyPI\"/](\"https://img.shields.io/pypi/v/sigmashake?color=3776AB&logo=pypi&logoColor=white\")
![\"Docker\"/](\"https://img.shields.io/badge/ghcr.io-sigmashakeinc%2Fssg-0db7ed?logo=docker&logoColor=white\"){kind=icon}
![\"GitHub](\"https://img.shields.io/github/v/release/sigmashakeinc/ssg?logo=github\")
![\"License:](\"https://img.shields.io/badge/license-proprietary-red\"){kind=icon}
![\"Docs\"/](\"https://img.shields.io/badge/docs-docs.sigmashake.com-4a9eff?logo=readthedocs&logoColor=white\"){kind=icon}
![\"Discord\"/](\"https://img.shields.io/badge/discord-join-5865F2?logo=discord&logoColor=white\"){kind=icon}
\n Install ·\n Quick start ·\n Demos ·\n Docs ·\n Discord\n
\n\n---\n\n## What is SSG?\n\nSSG is SigmaShake's AI agent governance CLI. It evaluates every tool call your AI agent is about to make against a set of local rules — blocking dangerous operations, asking for approval on risky ones, and recording everything to a queryable audit log. It runs locally in sub-2 milliseconds and works with every major AI client: **Claude Code**, **Cursor**, **GitHub Copilot**, **Codex**, **Gemini**, **Antigravity**, and **Pi**.\n\n## See it in action\n\n### 🛡️ Real-time approval dashboard\n\nA local dashboard at `http://localhost:5599` shows pending approvals, blocked commands, and a live audit stream.\n\n\n\n### 🌍 Community rules hub\n\nPull curated rulesets from [`hub.sigmashake.com`](https://hub.sigmashake.com) — covering bash, secrets, SQL, Docker, Kubernetes, Python, React, Terraform, and more.\n\n\n\n> 🎥 [Watch the full dashboard tour](https://docs.sigmashake.com/img/demos/dashboard_demo.webm) (WebM, 208 KB) · or read the [dashboard docs](https://docs.sigmashake.com/dashboard).\n\n## Why teams pick SSG\n\n- 🏠 **Local-first evaluation** — no outbound AI calls for governance\n- ⚡ **Sub-2ms rule eval** — faster than the network call it gates\n- 🧩 **Works everywhere** — Claude Code, Cursor, Copilot, Codex, Gemini, Antigravity, Pi\n- 🔍 **Queryable audit trail** — every decision stored locally; searchable from the CLI\n- 🌐 **Hub rulesets** — 20+ curated packs authored by the community\n- 🏢 **Fleet-ready** — SSO, org policies, and SIEM forwarding for enterprise deployments\n\n## Install\n\n```bash\npnpm add -g @sigmashake/ssg\nssg --help\n```\n\n### Every channel\n\n| Channel | Install |\n|---------|---------|\n| npm | `pnpm add -g @sigmashake/ssg` |\n| PyPI | `pip install sigmashake` |\n| Homebrew | `brew install sigmashakeinc/tap/ssg` |\n| winget | `winget install SigmaShake.SSG` |\n| Docker (OS-agnostic) | `docker run --rm -i ghcr.io/sigmashakeinc/ssg:latest eval < call.json` |\n\nThe Docker image at `ghcr.io/sigmashakeinc/ssg` is also the install path for musl distros (Alpine, Chimera) and hosts running glibc < 2.24. See the [Docker guide](https://docs.sigmashake.com/getting-started) for usage.\n\n## Quick start\n\n```bash\nssg init # install adapters for detected AI clients + local config\nssg setup # guided ruleset selection\nssg serve # start the local approval dashboard at localhost:5599\n```\n\nEvaluate a single tool call from the shell:\n\n```bash\necho '{\"tool\":\"Bash\",\"input\":{\"command\":\"rm -rf /\"}}' | ssg eval\n```\n\nWire SSG into a specific client (or every supported one):\n\n```bash\nssg init --client=claude-code # or: cursor | copilot | codex | gemini | antigravity | pi\nssg init --client=all # install every adapter regardless of detection\n```\n\n### First run & data location\n\nThe first `ssg init` or `ssg setup` run requires accepting the [SigmaShake Terms of Service](https://sigmashake.com/terms). Interactive runs prompt for acceptance (default: No). Non-interactive / CI installs must pass `--accept-terms` or the command exits non-zero.\n\n| Flag / env | Description |\n|---|---|\n| `--accept-terms` | Accept the Terms of Service non-interactively (required in CI / no TTY). |\n| `--home\n ![\"Claude](\"https://img.shields.io/badge/Claude_Code-000000?logo=anthropic&logoColor=white\"){kind=icon}
![\"Cursor\"/](\"https://img.shields.io/badge/Cursor-000000?logo=cursor&logoColor=white\"){kind=icon}
![\"GitHub](\"https://img.shields.io/badge/GitHub_Copilot-24292e?logo=github&logoColor=white\"){kind=icon}
![\"Codex\"/](\"https://img.shields.io/badge/Codex-412991?logo=openai&logoColor=white\"){kind=icon}
![\"Gemini\"/](\"https://img.shields.io/badge/Gemini-4285F4?logo=google&logoColor=white\"){kind=icon}
![\"Antigravity\"/](\"https://img.shields.io/badge/Antigravity-111111\"){kind=icon}
![\"Pi\"/](\"https://img.shields.io/badge/Pi-7C3AED\"){kind=icon}
\n © Sigma Shake. All rights reserved. · sigmashake.com · Terms · Privacy\n
\n","readmeFilename":"README.md"}