SShyPie (dsh-privacy-gate)
siml1169/shypie
Redacts PII in tool-result text before it is logged (error-result metadata is not rewritten), denies read_image and binary/document reads outside allowPaths, provides local privacy_extract, privacy_ocr, privacy_scan and privacy_rehydrate tools (PDF/OCR needs a separately installed local extractor configured through extractCli), and enforces a fail-closed llm/stream egress guard before DSH dispatches any model request.