CirvixGuides / Cursor
Cursor,
under policy.
CIRVIX evaluates Cursor's agent tool calls locally before they execute.
Install
npm install -g @cirvix_ai/agent-control
Init
cirvix init
Connect
cirvix runtime # local enforcement endpoint on a unix socket / named pipe# route Cursor's shell and edit tools through the local endpoint
Policy
cirvix policy check
Test — watch a decision
With Claude Code running under CIRVIX, ask it to read a credential file such as
~/.aws/credentials. The read is denied by policy before it happens, an audit event is written,
and the agent sees a structured denial instead of your secrets.
Verify
Run cirvix logs to see the decision record: action normalized, rule matched,
decision DENY, payload redacted. A legitimate workspace read shows PERMIT.
If both behave that way, Claude Code is under control.