The agent deleted, overwrote or read what it shouldn't have. With HarnessUp, the damage can be undone and the secret never even makes it into the conversation.
10 protection tools, from Pro to Ultra. Everything runs on your machine, and what gets undone comes back with one click.
◀◀ REWrec. before the damage_one click and done ↖
10 protection tools1 click to undo a turn4 doors that close: MCP, network, folder and screen
Pick the point. Hit rewind.
This is Smart Return in pocket version. Mark which step of the turn you want to go back before and watch the files return. Nothing here touches your disk.
HarnessUp / Smart Return · turn 14session stopped
What the agent did in this turn. Click a step to go back to before it.
Project stateillustrative example
src/checkout.tschanged
config/prices.jsonchanged
README.mdchanged
logo.svg → old/moved
Tape ready.
Step 03 marked. Press Undo or the U key.
Simplified demo. The real Smart Return only acts with the session stopped and does not undo changes made by shell commands, such as step 04. Shortcuts with the panel in focus: ↑↓ pick the step, U undoes, S starts and stops the agent, R resets.
Secret Lock · Ultra · already on
Passwords stay out of the conversation.
The agent needs to know the key exists. Its value stays with you.
On readWhen the agent opens a file such as .env, it sees the variable names with the values swapped for a mask.
On requestPasted a password into the prompt by accident? Secret Lock holds it before it becomes context.
On diskThe file stays exactly the same. The mask exists only in the conversation.
Secret Lock on
DATABASE_URL=postgres://app:••••••@dbSTRIPE_KEY=••••••APP_PORT=3000SMTP_PASS=••••••
Ultra · Pro
Four doors. You lock them.
A suspicious MCP server, a network that shouldn't be used, a folder the agent can't touch, a screen that costs tokens to look at. Each door closes with one click and only opens when you say so.
Click the breakers or use keys 1 to 4 with the panel in focus.Visual simulation. In the panel, each door stays closed until you turn it back on.
Dangerous commands and what goes up to GitHub
UltraShield Guard · Ultra
Bad command? There's a safety net.
For the day the agent types what it shouldn't. Three reactions, depending on how big the risk is.
Outside the project, nothing gets deleted.Deleting outside the project folder is blocked.
Inside the project, it's kept.Whatever is deleted inside it is kept so it can come back.
Risky git, copy and ask.Before a risky git command, it makes a copy and still asks for your confirmation.
Git Shield · Pro
Secrets don't go up to GitHub.
Checks the project's .gitignore, creates one if there isn't one, and writes the missing lines for secrets, generated folders and tool leftovers.
.gitignoreGit Shield block active
node_modules/ *.log
# >>> Git Shield marked block .env .env.* dist/ .cache/ # <<< end of block
One click removes the whole block, leaving no line behind.
FilesNobody touches them.StagingWhat is staged stays.BranchesNone is created or moved.
Checkpoint · Pro
Save the game before the boss.
About to ask for a huge refactor? Mark a restore point first.
Checkpoint saves the project state inside git, in its own reference. It doesn't touch the files, what is staged for commit or your branches. If the change goes wrong, the point stays there, waiting.
Antiloop Protector · spend per roundillustrative example
warningsame edit tried 3 times with no progress
warningthe agent gets the message and changes route… or doesn't
stopspend well above normal + repetition: session stopped
Antiloop Protector · Ultra
Agent in a loop? Get out of the loop.
First comes the warning to the agent that is repeating itself. The session only stops when two things happen together: spend goes well above the project's own normal and the same actions repeat without progress.
Big task keeps moving.A long session that is producing work isn't interrupted.
Two switches.You can turn off the spend brake and keep the repetition warning.
The right protection in your plan.
Each plan includes the tools of the previous ones. Start with the undo button and close the doors when the work calls for it.
Eyes Off avoids spending tokens on screenshots, and Antiloop Protector holds back the session that would burn through the 5-hour window by repeating the same thing. Less damage, smaller bill.
Pro and Ultra
Local.on your machine
Your account stays yours.
HarnessUp runs the official claude and codex with your account and never reads or stores your token or authentication key. The integration uses official hooks, with no proxy and no API interception. The protection tools act on the agent's work, on your machine.
Before you press the button.
What each tool undoes, keeps or closes, with no extra promises.
It undoes the file changes from a turn, starting from the command you choose. It only works with the session stopped, and changes made by shell commands are left out. For anything beyond one turn, mark a Checkpoint beforehand.
02What's the difference between Smart Return and Checkpoint?
Smart Return goes back one turn that has already happened. Checkpoint is a restore point you mark before a big change, stored in git's own reference, without touching files, staging or branches.
03Does Secret Lock change my .env?
No. The file on disk does not change. When reading, the agent gets the variable names with masked values, and a value pasted into the request is held before it enters the conversation. The tool comes on by default in the Ultra plan.
04Does Blackout turn off the computer's internet?
No. It refuses the agent's network actions in the session: WebFetch, WebSearch, curl, git push and npm install. It applies to one session or to all of them, until you turn it back on. The rest of the computer stays normal.
05Are Protection and Security the same front?
Protection handles undoing, keeping and closing doors. Security watches threats, such as injected instructions and vulnerable code, and locks groups of commands. Meet Security ↗
Let the agent dare. Without fear.
Turn on the protection tools in your plan. The measuring layer is free and needs no login, so you can see your usage before you decide.