--- id: block-persistence-shapes track: coding version: 0.0.6 label: blocks keyword: block where: command sha256: e1e6484082078f8351fdbae59dde8796266297fd6c35a47372537c0d6dda517c source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/base/block-persistence-shapes catalog_ref: 1e60d211c1bb767152c6ab0167932da06ab3a10f --- # Block Persistence and Publishing Commands block-persistence-shapes · version 0.0.6 Blocks — Refuses a matched shell command before it runs. Chock adds friction. It is not a security boundary. In a git repo: in agent (The agent's hooks check this once chock sync sets them up. If the hook crashes, the action goes through.) ## What it does Best-effort guard against shell commands that publish or keep access after the session: npm/pnpm/yarn/twine/ poetry/uv/cargo/gem publish, docker/podman push and login, npm token and registry edits, repos made public; user services, launch agents, cron/at/schtasks, Run keys, authorized_keys, runner registration, sudoers, setuid bits, detached downloads. Asks on gh release create, git remote add, git push to a URL. Misses: scripts, aliases, system units, shell rc files, ssh-run commands. ## Its label on each agent - Claude Code (tested): Blocks — Refuses a matched shell command before it runs. Builder: /coding/builder/#client=claude-code&p=block-persistence-shapes - Cursor (tested): Blocks — Refuses a matched shell command before it runs. Where its description says it asks, it asks. Builder: /coding/builder/#client=cursor&p=block-persistence-shapes - Codex (tested): Blocks — Refuses a matched shell command before it runs. Where its description says it asks, it refuses, because this client cannot prompt before a shell command. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run). Builder: /coding/builder/#client=codex&p=block-persistence-shapes - GitHub Copilot (tested): Blocks — Refuses a matched shell command before it runs. Where its description says it asks, it asks in VS Code and refuses in Copilot CLI, because it cannot prompt there. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run). Builder: /coding/builder/#client=copilot&p=block-persistence-shapes - Devin (tested): Blocks — Refuses a matched shell command before it runs. Where its description says it asks, it refuses, because this client cannot prompt before a shell command. If the hook errors, the action goes through (vendor docs only, not witnessed). Builder: /coding/builder/#client=devin&p=block-persistence-shapes - Grok (tested): Not graded yet for Grok. Builder: /coding/builder/#client=grok&p=block-persistence-shapes - goose (tested): Not graded yet for goose. Builder: /coding/builder/#client=goose&p=block-persistence-shapes - Antigravity (tested): Not graded yet for Antigravity. Builder: /coding/builder/#client=antigravity&p=block-persistence-shapes - OpenHands (untested): Not graded yet for OpenHands. Builder: /coding/builder/#client=openhands&p=block-persistence-shapes - Kimi Code (untested): Not graded yet for Kimi Code. Builder: /coding/builder/#client=kimi-code&p=block-persistence-shapes - Factory Droid (untested): Not graded yet for Factory Droid. Builder: /coding/builder/#client=factory-droid&p=block-persistence-shapes ## What it misses Scripts, aliases, system units, shell rc files, ssh-run commands. ## Examples - Refused: A request publishes the package to npm. — `npm publish` - Allowed: A request inspects what would ship with a dry run. — `npm publish --dry-run` ## Latest change 0.0.6 · 2026-10-27 — Title wording only (IR-F40): "Block Persistence Shapes" is now "Block Persistence and Publishing Commands". The id, guard and tests are unchanged. ## Provenance - Tested by 109 of 109 cases run automatically - SHA-256: `e1e6484082078f8351fdbae59dde8796266297fd6c35a47372537c0d6dda517c` - Catalog commit: https://github.com/open-coder-ai/chock-catalog/commit/1e60d211c1bb767152c6ab0167932da06ab3a10f - Source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/base/block-persistence-shapes (catalog path `base/block-persistence-shapes`) - Presets: Shell containment - JSON: `/api/coding/policies/block-persistence-shapes.json` - Report a problem: https://chock.sh/report/?policy=block-persistence-shapes&version=0.0.6&page=%2Fcoding%2Fpolicies%2Fblock-persistence-shapes%2F