No-Hash Zone

Ask an AI coding agent to check a copy and it runs sha256sum; ask it to find duplicates and it runs fdupes. For code that is fine. For private media - unreleased footage, client shoots, interviews, legal and medical scans, anything under an NDA - a fingerprint is a leak: it identifies the exact file, links copies across machines, and lands in transcripts that leave your desk. No-Hash Zone fences off the folders, drives and network shares you choose. A policy block for CLAUDE.md tells the agent what counts as hashing, what is still allowed (names, sizes, dates) and to stop and ask rather than fall back. A small PreToolUse hook backs it up: before every shell command it checks whether the command touches a protected place and uses a hashing operation - from md5 and Get-FileHash to rsync, restic, ffmpeg's framemd5 and ImageMagick's image signature - and refuses it if so, failing closed. The agent keeps copying, sorting and organizing as before; it just verifies by names and sizes and asks when a job truly needs content comparison. Free under Apache-2.0, dependency-free, with a cross-platform installer and a test suite that passes on all three systems.