https://chock.sh/ https://chock.sh/coding/ https://chock.sh/coding/author/ https://chock.sh/coding/builder/ https://chock.sh/coding/clients/ https://chock.sh/coding/install/ https://chock.sh/coding/policies/ https://chock.sh/coding/policies/agent-devenv-autoexec/ https://chock.sh/coding/policies/agent-discipline/ https://chock.sh/coding/policies/agent-permissions-scan/ https://chock.sh/coding/policies/agentic-code-security/ https://chock.sh/coding/policies/ask-credential-switching/ https://chock.sh/coding/policies/block-curl-pipe-sh/ https://chock.sh/coding/policies/block-destructive-commands/ https://chock.sh/coding/policies/block-fetch-exec-in-files/ https://chock.sh/coding/policies/block-hook-bypass-in-files/ https://chock.sh/coding/policies/block-invisible-unicode/ https://chock.sh/coding/policies/block-no-verify/ https://chock.sh/coding/policies/block-persistence-shapes/ https://chock.sh/coding/policies/block-secret-store-reads/ https://chock.sh/coding/policies/block-test-skips/ https://chock.sh/coding/policies/block-unapproved-egress/ https://chock.sh/coding/policies/block-unguarded-agent-spawn/ https://chock.sh/coding/policies/block-unpinned-agent-components/ https://chock.sh/coding/policies/block-unsafe-code-execution/ https://chock.sh/coding/policies/block-wildcard-agent-permissions/ https://chock.sh/coding/policies/block-wildcard-iam/ https://chock.sh/coding/policies/chock-mise/ https://chock.sh/coding/policies/ci-github-actions-security/ https://chock.sh/coding/policies/code-safety/ https://chock.sh/coding/policies/compromised-package-ioc/ https://chock.sh/coding/policies/context-hygiene/ https://chock.sh/coding/policies/dockerfile-compose-security/ https://chock.sh/coding/policies/eu-ai-act-high-risk-triage/ https://chock.sh/coding/policies/eu-ai-act-prohibited-practices/ https://chock.sh/coding/policies/eu-ai-act-transparency/ https://chock.sh/coding/policies/firecrawl-fallback-only/ https://chock.sh/coding/policies/git-safety/ https://chock.sh/coding/policies/guard-deletion/ https://chock.sh/coding/policies/guard-memory-writes/ https://chock.sh/coding/policies/hardening-flags/ https://chock.sh/coding/policies/iam-policy-scan/ https://chock.sh/coding/policies/injection-defense/ https://chock.sh/coding/policies/java-security/ https://chock.sh/coding/policies/limit-diff-size/ https://chock.sh/coding/policies/lockfile-integrity/ https://chock.sh/coding/policies/memory-discipline/ https://chock.sh/coding/policies/no-a11y-regression/ https://chock.sh/coding/policies/opaque-blob-guard/ https://chock.sh/coding/policies/owasp-asi01-agent-goal-hijack/ https://chock.sh/coding/policies/owasp-asi02-tool-misuse/ https://chock.sh/coding/policies/owasp-asi03-identity-privilege-abuse/ https://chock.sh/coding/policies/owasp-asi04-agentic-supply-chain/ https://chock.sh/coding/policies/owasp-asi05-unexpected-code-execution/ https://chock.sh/coding/policies/owasp-asi06-memory-context-poisoning/ https://chock.sh/coding/policies/owasp-asi07-insecure-inter-agent-communication/ https://chock.sh/coding/policies/owasp-asi08-cascading-failures/ https://chock.sh/coding/policies/owasp-asi09-human-agent-trust/ https://chock.sh/coding/policies/owasp-asi10-rogue-agents/ https://chock.sh/coding/policies/package-lifecycle-scripts/ https://chock.sh/coding/policies/pin-github-actions/ https://chock.sh/coding/policies/protect-agent-config/ https://chock.sh/coding/policies/protect-ci-workflows/ https://chock.sh/coding/policies/protect-commit-privacy/ https://chock.sh/coding/policies/protect-main-branch/ https://chock.sh/coding/policies/protect-test-integrity/ https://chock.sh/coding/policies/refname-filename-metachar/ https://chock.sh/coding/policies/registry-config/ https://chock.sh/coding/policies/review-like-a-red-team/ https://chock.sh/coding/policies/scan-hidden-content/ https://chock.sh/coding/policies/scan-instruction-files/ https://chock.sh/coding/policies/scan-secret-files/ https://chock.sh/coding/policies/scan-secrets-entropy/ https://chock.sh/coding/policies/scan-secrets/ https://chock.sh/coding/policies/scan-suppression-markers/ https://chock.sh/coding/policies/token-efficiency/ https://chock.sh/coding/policies/verify-dependency-exists/ https://chock.sh/coding/policies/verify-mcp-allowlist/ https://chock.sh/docs/ https://chock.sh/docs/agents/ https://chock.sh/docs/agents/aider/ https://chock.sh/docs/agents/amp/ https://chock.sh/docs/agents/antigravity/ https://chock.sh/docs/agents/claude-code/ https://chock.sh/docs/agents/cline/ https://chock.sh/docs/agents/codex-cli/ https://chock.sh/docs/agents/copilot/ https://chock.sh/docs/agents/cursor/ https://chock.sh/docs/agents/deepseek-harness/ https://chock.sh/docs/agents/devin/ https://chock.sh/docs/agents/factory-droid/ https://chock.sh/docs/agents/gemini-cli/ https://chock.sh/docs/agents/goose/ https://chock.sh/docs/agents/grok/ https://chock.sh/docs/agents/junie/ https://chock.sh/docs/agents/kilo-code/ https://chock.sh/docs/agents/kimi-code/ https://chock.sh/docs/agents/kiro/ https://chock.sh/docs/agents/mistral-vibe/ https://chock.sh/docs/agents/opencode/ https://chock.sh/docs/agents/openhands/ https://chock.sh/docs/agents/replit/ https://chock.sh/docs/agents/roo-code/ https://chock.sh/docs/agents/tabnine/ https://chock.sh/docs/agents/vscode-copilot/ https://chock.sh/docs/agents/windsurf/ https://chock.sh/docs/agents/zed/ https://chock.sh/docs/agentseam/ https://chock.sh/docs/agentseam/api/ https://chock.sh/docs/agentseam/cli/ https://chock.sh/docs/agentseam/direct/ https://chock.sh/docs/architecture/ https://chock.sh/docs/architecture/enforcement-surfaces/ https://chock.sh/docs/architecture/life-of-a-policy/ https://chock.sh/docs/architecture/lifecycle/ https://chock.sh/docs/architecture/stop-and-resume/ https://chock.sh/docs/architecture/whole-train/ https://chock.sh/docs/bypasses/ https://chock.sh/docs/catalog/adopt/ https://chock.sh/docs/catalog/contribute/ https://chock.sh/docs/cli/ https://chock.sh/docs/cli/add/ https://chock.sh/docs/cli/bundle/ https://chock.sh/docs/cli/bundle/off/ https://chock.sh/docs/cli/bundle/on/ https://chock.sh/docs/cli/bundle/status/ https://chock.sh/docs/cli/check-matrix/ https://chock.sh/docs/cli/check/ https://chock.sh/docs/cli/compile/ https://chock.sh/docs/cli/compliance/ https://chock.sh/docs/cli/disable/ https://chock.sh/docs/cli/doctor/ https://chock.sh/docs/cli/enable/ https://chock.sh/docs/cli/eval/ https://chock.sh/docs/cli/gate-log/ https://chock.sh/docs/cli/gateway/ https://chock.sh/docs/cli/gateway/run/ https://chock.sh/docs/cli/incident/ https://chock.sh/docs/cli/init/ https://chock.sh/docs/cli/install-ci/ https://chock.sh/docs/cli/install-hooks/ https://chock.sh/docs/cli/install-skills/ https://chock.sh/docs/cli/install/ https://chock.sh/docs/cli/marketplace/ https://chock.sh/docs/cli/mcp/ https://chock.sh/docs/cli/new/ https://chock.sh/docs/cli/plugin/ https://chock.sh/docs/cli/policies/ https://chock.sh/docs/cli/recompile/ https://chock.sh/docs/cli/refresh/ https://chock.sh/docs/cli/registry/ https://chock.sh/docs/cli/registry/get/ https://chock.sh/docs/cli/registry/init/ https://chock.sh/docs/cli/registry/list/ https://chock.sh/docs/cli/registry/resolve/ https://chock.sh/docs/cli/registry/scan/ https://chock.sh/docs/cli/remove/ https://chock.sh/docs/cli/resume/ https://chock.sh/docs/cli/review/ https://chock.sh/docs/cli/review/emit/ https://chock.sh/docs/cli/review/require/ https://chock.sh/docs/cli/review/verify/ https://chock.sh/docs/cli/status/ https://chock.sh/docs/cli/stop/ https://chock.sh/docs/cli/sync/ https://chock.sh/docs/cli/validate/ https://chock.sh/docs/cli/verify/ https://chock.sh/docs/cli/verify/init/ https://chock.sh/docs/cli/verify/verify/ https://chock.sh/docs/cli/witness/ https://chock.sh/docs/cli/witness/export/ https://chock.sh/docs/configure/ https://chock.sh/docs/how-it-works/ https://chock.sh/docs/how-it-works/stop/ https://chock.sh/docs/how-it-works/surfaces/ https://chock.sh/docs/monitor/ https://chock.sh/docs/policies/ https://chock.sh/docs/policies/agent-devenv-autoexec/ https://chock.sh/docs/policies/agent-discipline/ https://chock.sh/docs/policies/agent-permissions-scan/ https://chock.sh/docs/policies/agentic-code-security/ https://chock.sh/docs/policies/ask-credential-switching/ https://chock.sh/docs/policies/block-curl-pipe-sh/ https://chock.sh/docs/policies/block-destructive-commands/ https://chock.sh/docs/policies/block-fetch-exec-in-files/ https://chock.sh/docs/policies/block-hook-bypass-in-files/ https://chock.sh/docs/policies/block-invisible-unicode/ https://chock.sh/docs/policies/block-no-verify/ https://chock.sh/docs/policies/block-persistence-shapes/ https://chock.sh/docs/policies/block-secret-store-reads/ https://chock.sh/docs/policies/block-test-skips/ https://chock.sh/docs/policies/block-unapproved-egress/ https://chock.sh/docs/policies/block-unguarded-agent-spawn/ https://chock.sh/docs/policies/block-unpinned-agent-components/ https://chock.sh/docs/policies/block-unsafe-code-execution/ https://chock.sh/docs/policies/block-wildcard-agent-permissions/ https://chock.sh/docs/policies/block-wildcard-iam/ https://chock.sh/docs/policies/chock-mise/ https://chock.sh/docs/policies/ci-github-actions-security/ https://chock.sh/docs/policies/code-safety/ https://chock.sh/docs/policies/compromised-package-ioc/ https://chock.sh/docs/policies/context-hygiene/ https://chock.sh/docs/policies/dockerfile-compose-security/ https://chock.sh/docs/policies/eu-ai-act-high-risk-triage/ https://chock.sh/docs/policies/eu-ai-act-prohibited-practices/ https://chock.sh/docs/policies/eu-ai-act-transparency/ https://chock.sh/docs/policies/firecrawl-fallback-only/ https://chock.sh/docs/policies/git-safety/ https://chock.sh/docs/policies/guard-deletion/ https://chock.sh/docs/policies/guard-memory-writes/ https://chock.sh/docs/policies/hardening-flags/ https://chock.sh/docs/policies/iam-policy-scan/ https://chock.sh/docs/policies/injection-defense/ https://chock.sh/docs/policies/java-security/ https://chock.sh/docs/policies/limit-diff-size/ https://chock.sh/docs/policies/lockfile-integrity/ https://chock.sh/docs/policies/memory-discipline/ https://chock.sh/docs/policies/no-a11y-regression/ https://chock.sh/docs/policies/opaque-blob-guard/ https://chock.sh/docs/policies/owasp-asi01-agent-goal-hijack/ https://chock.sh/docs/policies/owasp-asi02-tool-misuse/ https://chock.sh/docs/policies/owasp-asi03-identity-privilege-abuse/ https://chock.sh/docs/policies/owasp-asi04-agentic-supply-chain/ https://chock.sh/docs/policies/owasp-asi05-unexpected-code-execution/ https://chock.sh/docs/policies/owasp-asi06-memory-context-poisoning/ https://chock.sh/docs/policies/owasp-asi07-insecure-inter-agent-communication/ https://chock.sh/docs/policies/owasp-asi08-cascading-failures/ https://chock.sh/docs/policies/owasp-asi09-human-agent-trust/ https://chock.sh/docs/policies/owasp-asi10-rogue-agents/ https://chock.sh/docs/policies/package-lifecycle-scripts/ https://chock.sh/docs/policies/pin-github-actions/ https://chock.sh/docs/policies/protect-agent-config/ https://chock.sh/docs/policies/protect-ci-workflows/ https://chock.sh/docs/policies/protect-commit-privacy/ https://chock.sh/docs/policies/protect-main-branch/ https://chock.sh/docs/policies/protect-test-integrity/ https://chock.sh/docs/policies/refname-filename-metachar/ https://chock.sh/docs/policies/registry-config/ https://chock.sh/docs/policies/review-like-a-red-team/ https://chock.sh/docs/policies/scan-hidden-content/ https://chock.sh/docs/policies/scan-instruction-files/ https://chock.sh/docs/policies/scan-secret-files/ https://chock.sh/docs/policies/scan-secrets-entropy/ https://chock.sh/docs/policies/scan-secrets/ https://chock.sh/docs/policies/scan-suppression-markers/ https://chock.sh/docs/policies/token-efficiency/ https://chock.sh/docs/policies/verify-dependency-exists/ https://chock.sh/docs/policies/verify-mcp-allowlist/ https://chock.sh/docs/quickstart/plugin/ https://chock.sh/docs/quickstart/repo/ https://chock.sh/docs/release-notes/ https://chock.sh/docs/troubleshooting/ https://chock.sh/docs/where-chock-sits/ https://chock.sh/docs/write/evals/ https://chock.sh/docs/write/manifest/ https://chock.sh/docs/write/on-the-fly/ https://chock.sh/docs/write/own-policy/ https://chock.sh/faq/ https://chock.sh/for-agents/ https://chock.sh/general/ https://chock.sh/report/ https://chock.sh/repos/ https://chock.sh/repos/builder/ https://chock.sh/security/