Teach your AI agent what not to do.

Open-source guardrails for AI coding agents: rules the agent reads, checks that run as it writes, and gates at commit and in CI.

chock · chock-catalog · chock.sh (launching soon)

Chock is a policy compiler. You write a policy once, and Chock compiles it into the strongest control each coding agent supports: a git hook that exits non-zero, a CI gate, or the agent’s own pre-tool hook. Every check is a deterministic script, with no model and no upload. Free and open source (Apache-2.0).

Application security for the code your agents write

Coding agents already ask before they run a shell command. What they do not check is the code they write: SQL injection in a Spring repository, an IAM grant on *, an MCP server at @latest, a bidi override hiding in a source file, a secret written into agent memory. Chock checks that code as the agent writes it, at commit and in CI.

Area	What gets refused	Policy	Tier
Java & Kotlin	injection, XXE, SSRF, unsafe deserialization, weak crypto, dependencies below a known…

score = signal / reach signal = 0.25·commit_velocity // commits in last 90 days (cap 30) + 0.20·contributor_work // unique authors × velocity (cap 100) + 0.20·issue_resolution // closed ÷ total issues + 0.20·fork_ratio // forks ÷ stars (proxy for real usage) + 0.10·release_cadence // releases in 90 days (cap 3) + age_bonus // +0 to +0.30 after 6 months + homepage_bonus // +0.05 if homepage is set reach = log₁₀(stars + watchers + 10)█

health = 0.35·recency // days since last commit (90d decay) + 0.25·cadence // commit rhythm consistency + 0.20·issue_health // closed ÷ total issues + 0.20·pr_health // merged ÷ total PRs█

Healthy 80 – 100 active, responsive, regular releases Stable 60 – 79 maintained, steady, no alarms Quiet 40 – 59 slowing down — watch this one At Risk 0 – 39 going dark · candidate for rescue█

solo_builder one person holds > 80% of commits (last 180d) needs_contributors has open "help wanted" or "good first issue" labels hidden_gem < 100 stars · active in last 3 months · documented legacy_hero repo > 5 years old · committed this year fork_magnet forks/stars > 0.5 · used as template or dependency release_machine 5+ releases in the last 90 days under_pressure > 10 open issues · ≤ 2 contributors · health ≥ 60 community_watch watchers > stars · devs tracking before the public community_hub GitHub Discussions enabled · > 20 discussions funded maintainer has active funding channel█