A few months ago I watched Claude Code run rm -rf on a directory it had misunderstood. Nothing critical was lost, but it got me thinking: I had given an autonomous agent unrestricted access to my shell, and the only thing standing between it and my filesystem was... nothing.
So I built Aegis — a small Rust CLI that sits between an AI agent and your real shell, and checks every command before it runs.
The problem
AI coding agents are genuinely useful, but they move fast and they make mistakes. The failure modes are well known by now:
deleting files or whole directories they misidentified
