GVNR · Install · Configure · Receipts · Teams (soon) · How it compares · Stop an agent overspending · Block dangerous commands · FAQ

GVNR

Install GVNR

GVNR runs inside your agent. Today that means Claude Code, as a plugin; Codex, Cursor, Gemini CLI, Grok, Hermes and OpenClaw are coming soon (see install for your agent). There is nothing to run beside it: no daemon, no port, no dashboard to keep open. It decides inside Claude Code's own hooks, before each tool call runs.

1. Install it

In Claude Code:

/plugin marketplace add instruxi-io/claude-plugins
/plugin install enforcer@instruxi
/plugin install enforcer-governor@instruxi

Then restart Claude Code. enforcer-governor brings the hooks, the rules and the slash commands. enforcer brings the sign-in and the Enforcer MCP server; GVNR works without it, but then it decides and records on your machine only. Both come from the public Instruxi plugin catalog.

2. Add the status line (recommended)

Claude Code does not let a plugin install a status line, so paste this into your own ~/.claude/settings.json:

{
  "statusLine": {
    "type": "command",
    "command": "node \"$(cat \"$HOME/.enforcer/plugin-root\")/statusline/spend.mjs\""
  }
}

You get · $3.40/$20: live spend against the limit, always visible. It is also where the money figure comes from: Claude Code hands its own cost only to the status line, and GVNR reads it back on the next tool call. Without it GVNR still enforces, and meters from the transcript instead. Every receipt says which of the two it used.

For belt and braces, also copy the permissions block from the plugin's settings.json into yours. The hooks enforce without it.

3. Sign in to your workspace (optional)

/enforcer:login

If your admin gave you a workspace code, add it, for example /enforcer:login ACME-1234-ABCD, and the sign-in page opens straight on your workspace. Team use is coming soon: signing in will add one record for the whole team, with a console. See GVNR for teams. Until you sign in, nothing leaves your machine.

What you get back

• allow: in budget and on task. Nothing interrupts.
• rewrite: there is a safer form of the same command. git push --force becomes git push --force-with-lease, shown to you before it runs.
• ask: irreversible, or spending too fast. Claude Code pauses and asks you.
• deny: over its limit, stuck in a loop, or not permitted at all. It never runs.

Check it is working

/enforcer-governor:status    spend per agent, limits, the state of the record
/enforcer-governor:verify    walk the receipt chain, name the first broken line
/enforcer-governor:config    every setting and which ones you changed

Ask Claude to read a file called .env and you should be asked first.

Getting out of the way

/plugin disable enforcer-governor removes it cleanly. To keep it installed but quiet, see switching checks off.

Other agents

Today GVNR governs Claude Code only. It sees every tool call there, including the ones that cost nothing, like rm -rf or reading a credential file.

An Instruxi solution. Verified against Enforcer Governor v2.8.0 on 25 September 2026. Runs in Claude Code today; other harnesses are coming. Nothing leaves your machine until you sign in to an Enforcer workspace. Next: Configure, Teams (soon), Receipts. Enforcer, the identity and authorization service, is at enforcer.instruxi.dev. Cookie settings