Local security/audit layer for Claude Code: logs every tool call, blocks sensitive file access, generates session reports.