numbat starts agent security with an inventory

numbat is an Apache-2.0 endpoint tool that normalizes local agent hooks, logs, and session artifacts into events, then evaluates them with CEL rules. Why it matters: It gives teams a trace before a policy: monitoring is the default, while blocking needs an explicit rule and a supported pre-action hook.

Try this: Run `numbat agents` and `numbat scan` on a non-production machine, then inspect the generated records and coverage matrix before installing hooks or enabling enforcement.