v0.4.0

Changelog

Other features

• 3039c02: feat: a Claude Code hook, and a rule that stops the agent changing its own supervision (@BipinRimal314)
• 26257a6: feat: always_enforce rules, and record unparseable messages (@BipinRimal314)

Fixes and performance

• 912bae1: fix(hook): resolve rooted paths to the drive on Windows, and read backslash paths (@BipinRimal314)

Documentation

• 18e30d1: docs: a README a new user can read in five minutes (@BipinRimal314)

Verifying this release

sha256sum -c checksums.txt --ignore-missing
gh attestation verify chokepoint_0.4.0_linux_amd64.tar.gz \
  --repo BipinRimal314/chokepoint

chokepoint is pre-1.0: the policy file format and the score's weights can
still change between minor versions. Pin a tag.

v0.3.0

Changelog

Other features

• 408e852: feat: init, wrap, unwrap and report commands (@BipinRimal314)
• 519694d: feat: monitor mode, to record policy violations without blocking them (@BipinRimal314)

Fixes and performance

• 1b6f05a: fix(policy): stop the sweep rule denying on the score alone (@BipinRimal314)
• 43e5f02: fix(policy): take targets from lists, so a batched read is checked (@BipinRimal314)
• aa1ed95: fix(proxy): exit when the MCP server exits, with its exit code (@BipinRimal314)
• a1b893b: fix(proxy): wait for replies before closing the server's stdin (@BipinRimal314)
• 4245d1c: fix(scope): check "." against the workspace, and only check places (@BipinRimal314)
• b003666: fix(security): refuse requests chokepoint and the server would read differently (@BipinRimal314)
• 8a8bcae: fix(telemetry): encrypt remote trace export by default (@BipinRimal314)
• 47b0c55: fix(wrap): put audit logs under LocalAppData on Windows, and test portably (@BipinRimal314)

Documentation

• e5bf07f: docs: bring the project state up to date with the sweep work (@BipinRimal314)
• a875c25: docs: commit the half of the project notes that should outlive a reinstall (@BipinRimal314)
• 2dd7a18: docs: end-to-end test with a real agent, and name chokepoint in every refusal (@BipinRimal314)
• 0a6e269: docs: record the upgrade that works, and stop claiming one that was not tested (@BipinRimal314)

Verifying this release

sha256sum -c checksums.txt --ignore-missing
gh attestation verify chokepoint_0.3.0_linux_amd64.tar.gz \
  --repo BipinRimal314/chokepoint

chokepoint is pre-1.0: the policy file format and the score's weights can
still change between minor versions. Pin a tag.

v0.2.0

Changelog

Detection and enforcement

• ffd3c3a: feat(detect): expose recent activity so rules can price a burst (@BipinRimal314)
• 28bca08: feat(inventory): hold a server to the schema it published first (@BipinRimal314)

Fixes and performance

• 7f53454: perf(detect): evict by moving an index, not by copying the session down (@BipinRimal314)

Documentation

• 39dd1fd: docs(blog): carry the piece through to the interception run (@BipinRimal314)
• e9b0064: docs(release): name the installer file that actually exists (@BipinRimal314)
• 064cce5: docs: record what the k3s manifests actually do on a cluster (@BipinRimal314)
• 7ef8363: docs: say what is built, and what stdio structurally cannot close (@BipinRimal314)
• cda1cb3: docs: v0.1.0 is published, so stop calling the version a placeholder (@BipinRimal314)

Verifying this release

sha256sum -c checksums.txt --ignore-missing
gh attestation verify chokepoint_0.2.0_linux_amd64.tar.gz \
  --repo BipinRimal314/chokepoint

chokepoint is pre-1.0: the policy file format and the score's weights can
still change between minor versions. Pin a tag.

v0.1.0

Changelog

Detection and enforcement

• 64f546b: feat(detect): check calls against a declared working set (Bipin Rimal bipinrimal314@gmail.com)
• 824b859: feat(detect): normalise targets into resources, and summarise where a session went (Bipin Rimal bipinrimal314@gmail.com)
• 8b7f583: feat(gateway): render the session report (Bipin Rimal bipinrimal314@gmail.com)
• adf69a5: feat(inventory): fingerprint tool definitions and catch the rug pull (Bipin Rimal bipinrimal314@gmail.com)

Evidence and telemetry

• 81d06a9: feat(audit): write decisions as an ingestible evidence log (Bipin Rimal bipinrimal314@gmail.com)
• 9334ef3: feat(telemetry): Prometheus metrics and OpenTelemetry spans (Bipin Rimal bipinrimal314@gmail.com)

Other features

• fe4f189: feat: chokepoint, a policy-enforcing MCP proxy with live UBFS scoring (Bipin Rimal bipinrimal314@gmail.com)

Fixes and performance

• 82e0aa1: perf(detect): parse each target once, and commit the benchmarks (Bipin Rimal bipinrimal314@gmail.com)

Documentation

• 4044afa: docs: add demo.sh (Bipin Rimal bipinrimal314@gmail.com)
• 7e78f01: docs: correct the coverage claim from 8 of 20 to 4 of 20, and pin it with a test (Bipin Rimal bipinrimal314@gmail.com)
• 5ea834a: docs: map chokepoint's controls to the OWASP Agentic Top 10 (Bipin Rimal bipinrimal314@gmail.com)

Verifying this release

sha256sum -c checksums.txt --ignore-missing
gh attestation verify chokepoint_0.1.0_linux_amd64.tar.gz \
  --repo BipinRimal314/chokepoint

chokepoint is pre-1.0: the policy file format and the score's weights can
still change between minor versions. Pin a tag.