tirith

Terminal security tool written in Rust that intercepts commands and pasted text in real-time, detecting suspicious URLs, homograph attacks, ANSI terminal injection, Unicode abuse (bidi/zero-width characters), and pipe-to-shell patterns before they execute. Features a tiered analysis pipeline, YAML policy system, shell hooks for bash/zsh/fish/PowerShell, and JSONL audit logging.