Three guardrails for Claude Code: compliance, drift, ledger.
MEK is a Claude Code plugin that ships ambient guardrails for agent work — distilled from three full apps (CosmicTasha, ScoreRift, BookKeeper).
Agents fail in patterns:
- They run irreversible ops without recording HITL approval.
- They drift away from a code-quality baseline without anyone noticing.
- They use Python
floatfor money and silently round.
MEK ships one ambient skill per failure mode, plus matching subagents you can delegate to via Task, plus opt-in hard-gate hooks.
From GitHub (once the repo is public):
/plugin marketplace add mbachaud/MaxExpressKit /plugin install maxexpresskit@mek-marketplace
From a local checkout (for development):
/plugin marketplace add /absolute/path/to/MaxExpressKit /plugin install maxexpresskit@mek-marketplace
/mek-init
Drops mek.toml + compliance/ templates into the current directory. Then:
/mek-drift init # seed the drift baseline /mek-status # see what's active
| Guardrail | When it fires | What it does |
|---|---|---|
| compliance | Before rm -rf, deploy, schema migration, money write, force-push |
Nudges to record HITL approval; can hard-block via config. |
| drift | After PR-sized work (Stop hook) or /mek-drift |
Compares auto scores (tests, lint, coverage) against your manual baseline. |
| ledger | When the agent touches amount_*, price_*, balance_* identifiers |
Enforces Decimal-only math; warns on float-money assignments. |
Skills nudge; hooks WARN. To escalate to hard blocks on specific ops, edit mek.toml:
[compliance.gates] rm_rf = "block" # require HITL before any rm -rf force_push_main = "block"
- Distilled core — works anywhere; no source-app dependency.
- Wrappers —
/mek-books,/mek-soc2light up when CosmicTasha / ScoreRift / BookKeeper are installed. v0.1.0 ships stubs; v0.2.0 ships full pass-through. - Scaffold —
/mek-initlays down your project-level config.
Apache 2.0 — see LICENSE.