HOL Guard — Stop risky AI agent tool calls before they run, locally | saasuji