It uses policy-based file locking with a cryptographic lockfile (.guardlock, Merkle + Ed25519). Protected files require an explicit unlock before changes land. Enforcement happens in VS Code and at commit via git hooks.
Everything is local - no backend, no telemetry. Audit logs and keys stay on your machine.
Website: https://www.bewaker.ai
GitHub: https://github.com/bewakerai/bewaker (Apache-2.0)
Marketplace: https://marketplace.visualstudio.com/items?itemName=BewakerA...