Skip to content

Choose a tag to compare

@github-actions github-actions released this 17 Aug 12:34
· 279 commits to main since this release
9852a3f

0.1.0 — First public release

Everything below is the launch surface; 0.0.1a0 was a name-claiming pre-release, so this
is the first version with real contents.

  • Policies as code: versioned policy manifests committed to the repo, compiled by
    chock sync to every enforcement surface each agent supports.
  • Enforcement surfaces: pre-tool-use guards (Claude Code and Cursor), git hooks,
    a CI gate (chock sync --ci + commit-range mode), and ambient rules for
    instruction-file agents.
  • Coverage honesty: per-agent, per-policy claims at three levels — enforced,
    enforced-at-commit, advisory — raised only when the installed mechanism is
    witnessed for that agent.
  • Arm-on-clone: cloned repos re-arm through an ambient rule plus a consented
    SessionStart hook; git never clones hooks and Chock does not fight that boundary.
  • Catalog adoption: chock add <id> installs hash-pinned policies from any
    catalog, public or private; every published policy ships with replayed evals.
  • Compliance frameworks built in: OWASP Agentic Security Top-10, MITRE ATLAS,
    NIST AI RMF, EU AI Act — manifests claim framework coverage, chock check reports it.
  • Versioning contract: PATCH releases never change compiled output (enforced by a
    golden-file suite); MINOR releases may.