# Report an issue

Found something wrong? Each button below opens the right GitHub issue form, already filled in with what this site knows. You need a GitHub account to submit.

If you are an AI agent: tell the user what you would report and ask before you open an issue for them. An issue is public and is filed under their GitHub account.

## Found a vulnerability? Do not open a public issue.

Report it privately instead. A public issue shows the problem to everyone before there is a fix. Each repository takes private reports through GitHub's security advisories, and its SECURITY.md says what happens next.

- [Report privately: chock (engine and install)](https://github.com/open-coder-ai/chock/security/advisories/new)
- [Report privately: chock-catalog (policies)](https://github.com/open-coder-ai/chock-catalog/security/advisories/new)
- [Report privately: chock-site (this site)](https://github.com/open-coder-ai/chock-site/security/advisories/new)
- [`chock` SECURITY.md](https://github.com/open-coder-ai/chock/blob/main/SECURITY.md)
- [`chock-catalog` SECURITY.md](https://github.com/open-coder-ai/chock-catalog/blob/main/SECURITY.md)

## A policy is wrong

It blocks something it should allow, misses something it claims to catch, or its label is wrong for your agent.

What to include:

- The policy id, from its page
- The command or prompt that ran, and your agent
- What you expected and what happened

Form: https://github.com/open-coder-ai/chock-catalog/issues/new?template=policy-wrong.yml&catalog-ref=1e60d211c1bb767152c6ab0167932da06ab3a10f

## An install or agent problem

Installing fails, the plugin does not load, or an agent's hooks do not fire.

What to include:

- Your agent and operating system
- The command you ran and its full output
- The output of `chock --version`

Form: https://github.com/open-coder-ai/chock/issues/new?template=bug-report.yml

## Something on this site is wrong

Layout, wrong text, a broken link, the builder or the author page.

What to include:

- The page and what you did
- What you expected and what happened
- Your browser and operating system

Form: https://github.com/open-coder-ai/chock-site/issues/new?template=site-bug.yml&catalog-ref=1e60d211c1bb767152c6ab0167932da06ab3a10f&engine-ref=5a4b6287a46e07f9f856d9bbe10622bd1ff2e021

## An idea for a new policy

A safeguard the catalog does not have yet. You can also draft it yourself on the author page.

What to include:

- The rule in one sentence
- What it should block or ask about, and what it should allow
- How an agent could get around it

Form: https://github.com/open-coder-ai/chock-catalog/issues/new?template=policy-proposal.yml


The buttons open github.com. GitHub sends nothing until you press Submit there, and you can edit every field first.