0.1.0 — First public release
Everything below is the launch surface; 0.0.1a0 was a name-claiming pre-release, so this
is the first version with real contents.
- Policies as code: versioned policy manifests committed to the repo, compiled by
chock syncto every enforcement surface each agent supports. - Enforcement surfaces: pre-tool-use guards (Claude Code and Cursor), git hooks,
a CI gate (chock sync --ci+ commit-range mode), and ambient rules for
instruction-file agents. - Coverage honesty: per-agent, per-policy claims at three levels —
enforced,
enforced-at-commit,advisory— raised only when the installed mechanism is
witnessed for that agent. - Arm-on-clone: cloned repos re-arm through an ambient rule plus a consented
SessionStart hook; git never clones hooks and Chock does not fight that boundary. - Catalog adoption:
chock add <id>installs hash-pinned policies from any
catalog, public or private; every published policy ships with replayed evals. - Compliance frameworks built in: OWASP Agentic Security Top-10, MITRE ATLAS,
NIST AI RMF, EU AI Act — manifests claim framework coverage,chock checkreports it. - Versioning contract: PATCH releases never change compiled output (enforced by a
golden-file suite); MINOR releases may.