---
id: block-unpinned-agent-components
track: coding
version: 0.1.1
label: blocks
keyword: block
where: write turn-end
sha256: c3cde29b3da557a9ce4485747c5cbb5a152e4ac54eaac3e9efe2dcee794fbc2b
source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/block-unpinned-agent-components
catalog_ref: 1e60d211c1bb767152c6ab0167932da06ab3a10f
---

# Block Unpinned Agent Components

block-unpinned-agent-components · version 0.1.1

Blocks — Blocks on an agent's file writes and at turn end. Chock adds friction. It is not a security boundary. 

In a git repo: at commit (Chock refuses the commit, locally and in CI.)



## What it does

Gate for the line-visible slice of ASI04: agent components fetched at a floating version. Blocks dist-tags (latest, next, canary, beta, rc, nightly) on npx/uvx/bunx, dlx, add/install and pipx run; FROM at latest or an untagged registry path; floating docker run/pull and docker:// refs; pip --pre; go install at latest; unversioned cargo installs; git+ installs and requirements, and github: dependencies, with no commit SHA. Per line: friction, not a boundary (limits in references).

## Its label on each agent

- Claude Code (tested): Blocks — Blocks on an agent's file writes and at turn end. Builder: /coding/builder/#client=claude-code&p=block-unpinned-agent-components
- Cursor (tested): Blocks — Blocks on an agent's file writes and at turn end. Builder: /coding/builder/#client=cursor&p=block-unpinned-agent-components
- Codex (tested): Blocks — Blocks on an agent's file writes and at turn end. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run). Builder: /coding/builder/#client=codex&p=block-unpinned-agent-components
- GitHub Copilot (tested): Blocks — Blocks at turn end only. It does not check a file write when it happens. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run). Builder: /coding/builder/#client=copilot&p=block-unpinned-agent-components
- Devin (tested): Blocks — Blocks at turn end only. It does not check a file write when it happens. If the hook errors, the action goes through (vendor docs only, not witnessed). Builder: /coding/builder/#client=devin&p=block-unpinned-agent-components
- Grok (tested): Not graded yet for Grok. Builder: /coding/builder/#client=grok&p=block-unpinned-agent-components
- goose (tested): Not graded yet for goose. Builder: /coding/builder/#client=goose&p=block-unpinned-agent-components
- Antigravity (tested): Not graded yet for Antigravity. Builder: /coding/builder/#client=antigravity&p=block-unpinned-agent-components
- OpenHands (untested): Not graded yet for OpenHands. Builder: /coding/builder/#client=openhands&p=block-unpinned-agent-components
- Kimi Code (untested): Not graded yet for Kimi Code. Builder: /coding/builder/#client=kimi-code&p=block-unpinned-agent-components
- Factory Droid (untested): Not graded yet for Factory Droid. Builder: /coding/builder/#client=factory-droid&p=block-unpinned-agent-components

## What it misses

This policy does not state what it misses.

## Examples

- Refused: A staged MCP config launches a server via npx at @latest.
- Allowed: A staged MCP config pins the server to an exact version.

## Latest change

0.1.1 · 2026-10-07 — Promoted from draft to production: every test case ran and passed, and no bug report was open. Behaviour unchanged.

## Provenance

- Tested by 54 of 54 cases run automatically
- SHA-256: `c3cde29b3da557a9ce4485747c5cbb5a152e4ac54eaac3e9efe2dcee794fbc2b`
- Catalog commit: https://github.com/open-coder-ai/chock-catalog/commit/1e60d211c1bb767152c6ab0167932da06ab3a10f
- Source: https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/agentic-security/block-unpinned-agent-components (catalog path `agentic-security/block-unpinned-agent-components`)
- Presets: Agent configuration
- JSON: `/api/coding/policies/block-unpinned-agent-components.json`
- Report a problem: https://chock.sh/report/?policy=block-unpinned-agent-components&version=0.1.1&page=%2Fcoding%2Fpolicies%2Fblock-unpinned-agent-components%2F