setup

# Set up HOL Guard for Claude Code HOL Guard is a separate open-source local runtime package. This plugin is the Claude Code discovery and setup companion; the actual security boundary is installed and maintained by the `hol-guard` CLI. Follow this sequence exactly: 1. Check whether HOL Guard is already available without changing the machine: ```bash command -v hol-guard && hol-guard --version ``` 2. If `hol-guard` is missing, explain that installation changes the user's Python/pipx environment and ask for explicit approval before installing it. Do not silently substitute another package manager. 3. After approval, install from PyPI with the documented command: ```bash pipx install hol-guard ``` If `pipx` is unavailable, stop and show the user the install requirement. Do not curl or execute an unreviewed bootstrap script as a fallback. 4. Initialize Guard interactively: ```bash hol-guard init ``` Do not add `--yes` unless the user explicitly requests unattended setup. `hol-guard init` owns Claude Code hook installation and avoids maintaining a second security implementation in this plugin. 5. Verify the resulting local protection: ```bash hol-guard status ``` 6. Tell the user what Guard reports as active or degraded. Do not claim protection from plugin installation alone. HOL Guard works locally without Guard Cloud. Cloud connection is optional and should only be offered when the user asks for synchronized history, team policy, fleet visibility, or shared approvals.