# Covenant Guard

> Run Claude Code unattended: capped spend, sandboxed execution, signed receipt, enforced from outside the agent's process.

## Facts
- Page: https://tashan.sh/capability/plugin-open-covenant-covenant-covenant-guard
- tashan id: plugin:open-covenant/covenant/covenant-guard
- Source: https://github.com/open-covenant/covenant
- Type: plugin
- Category: security
- tashan score: 51.0 / 100
- Adoption: 21.0
- Upkeep: 93.0
- Freshness: 84.0
- Evidence coverage: 84% of the inputs this score can use
- Health: active
- Instruction depth: not yet graded
- GitHub stars: 11
- License: Apache-2.0
- Official: no

## Install

```sh
/plugin marketplace add open-covenant/covenant
/plugin install covenant-guard@covenant
```

## Security audit
Not scanned. We audit npm-published capabilities; this one has no npm package we can resolve, or has not reached the queue. This is not a clean bill of health.

---
Measured 2026-09-13 by tashan (https://tashan.sh) from public evidence. Scorer s5.