Blocks your coding agent’s wrong moves before they land.

Chock blocks that action, nothing else: no suggestions, no rewrites.

chock · chock-catalog · chock.sh

Chock is a policy compiler. You write a policy once, and Chock compiles it into the strongest control each coding agent supports: a git hook that exits non-zero, a CI gate, or the agent’s own pre-tool hook. Every check is a deterministic script, with no model and no upload. Free and open source (Apache-2.0).

New guardrails are content, not code: a policy is a manifest plus the evals that prove it fires, with no engine change and no plugin API to learn.

Agent folders at this repo’s root (.claude/, .cursor/, …) are chock’s compiled output.

Install

chock 1.1.0 is on PyPI (Python 3.11 or newer):

pipx install chock==1.1.0

Two ways to adopt it

1. In your repository, for teams. Run chock init ., then chock add <id> --ref <catalog commit> --verify-sha <sha256> --skip-compile for each policy, then chock sync --repo . --ci. Commit the result. A fresh clone arms itself from what…