Terminal Guardian (Windows • PowerShell 7+)
===========================================
Deterministic guardrails and auditability for PowerShell terminal workflows on Windows.

Current validated release: v2.3.1

What It Is
----------
Terminal Guardian is a Windows-only PowerShell 7+ safety module that adds
deterministic command governance before execution.

It evaluates PowerShell command lines against policy and returns one of
four outcomes:
  - allow
  - warn
  - challenge
  - block

What It Does
------------
  - Evaluates PowerShell command lines against policy before execution
  - Warns, challenges, or blocks risky operations
  - Supports deterministic dry-run checks before running a command
  - Keeps workflows local-first
  - Includes built-in self-test and integrity verification

Requirements
------------
  - Windows
  - PowerShell 7+ (pwsh)
  - Windows PowerShell 5.1 is not supported

If you do not have PowerShell 7 installed:
  winget install --id Microsoft.PowerShell -s winget

Install
-------
  1. Download the ZIP from your Gumroad purchase
  2. Extract it
  3. Run setup.cmd
  4. Close all PowerShell windows
  5. Open a new PowerShell 7 (pwsh) window
  6. Run tg-selftest

Recommended Verification
------------------------
  tg --version
  tg-selftest

What success looks like
-----------------------
  - Terminal Guardian activates in PowerShell 7
  - tg-selftest passes
  - Risky commands are evaluated before execution
  - You can dry-run a command before using it

Download
--------
Public customer download:
https://meanrobotics.gumroad.com/l/terminal-guardian

Important Scope Note
--------------------
Terminal Guardian is a guardrail, not a vault.

It is designed to protect the PowerShell workflow it governs. It does not
claim to protect other shells, unrelated binaries, WSL, malware already
running as your user, kernel compromise, or unrelated privilege
escalation paths.

Support
-------
Email: support@meanrobotics.com

Copyright (c) 2026 Mean Robotics LLC. All rights reserved.