Axiom – blocks AI agents from inventing limits your code never defined

Axiom is a zero-dependency local guardrail that runs as a pre-write hook in Claude Code and Cursor, or as a stdin/stdout filter for other agents, blocking tool calls before writes occur. It uses regex and AST-pattern detection across three components (Noema, Lemma, Manam) to catch hardcoded numeric bounds, auth bypasses, dangerous Bash, secrets, dependency confusion and invented rate limits, with a tri-state TRUE/FALSE/UNKNOWN logic that halts on UNKNOWN. The author states detection is not semantic and can be bypassed with minor obfuscation, positioning it as a first line of defense alongside container isolation, branch protection and secret scanning.