Hacki
About the project
Companies pay for AI they cannot see. In May one company burned half a billion dollars on Claude in a single month because nobody set limits. In July thousands of shared Claude chats turned up on Google with API keys and contracts inside. Nobody was hacked. People pasted secrets to get work done and hit share.
Warden is a gate that runs on one machine in your company. An admin writes policy in plain English, Warden compiles it into rules and a human approves them. From then on every prompt an employee sends is judged before any model sees it. The judge is Qwen3 running locally on QVAC, with EmbeddingGemma for retrieval and an OCR model that reads attachments. There is no API key anywhere in the project.
It lives in the tool's own hook, working today in Claude Code and Codex, so a plain Max subscription is enough. Everyone besides the gateway machine installs a 4 KB file. Every decision lands in a hash chained audit log that stores hashes of prompts and never their text.