Seatbelt Complete Policy Pack (add-on for the Claude Code Seatbelt Kit)

Four more policies for the Claude Code Seatbelt. Drop the JSON files into ~/.sentarion/seatbelt/policies/ (Windows: %USERPROFILE%\.sentarion\seatbelt\policies\) and they are live on the next tool call. No restart. Requires the Claude Code Seatbelt Kit.

• saas-tenant-safety — for anyone with more than one customer in one database. Refuses unscoped UPDATE with no WHERE, bulk deletes of users/accounts/subscriptions, and billing-provider refunds/cancels; asks before customer-data updates, customer-facing sends, production DB shells, and schema/migration edits.
• agency-client-boundaries — for agencies and freelancers with many clients on one machine. Asks before anything that crosses into a client's GitHub org, cloud project, DNS, WordPress, CRM or store; asks before editing client-facing site config; asks before writing what looks like a client credential.
• production-server-hardening — for anyone letting an agent touch a live box. Refuses chmod 777, firewall flushes, deleting users, stopping ssh/nginx/db services, shutdown/reboot; asks before sudo, package installs, user/permission/firewall/cron/ssh-key changes, docker run/exec/prune, killing processes, editing /etc.
• spend-and-outbound — for everyone who has been surprised by a bill. Asks before POST/PUT/DELETE to any non-local URL, cloud resource creation, fine-tunes/batch jobs, SMS/email/social sends, ad platforms, payment actions, package publishes; asks before writing an unbounded loop around a paid or outbound call.

Each file is plain JSON you can edit. Check what any policy would say without running anything: python -m sentarion_mcp.seatbelt check --command "sudo apt install nginx"

Support: support@inboxaxe.com · More: https://inboxaxe.com/mcp