OpenRouter Armor: plain-English classifier for agent tool calls
Beta plugin sits between the model and your app: write hard-deny/soft-deny/allow rules in prose; Armor evaluates every tool call (powered by a decision model) and blocks policy violations before bash/git/exfil runs—Claude Code auto mode works via Ori on any OpenRouter model.