Adopt chock v0.9.0 and agentseam 0.3.0

[jothimani-rajendran]

What

Step three of the release train (agentseam 0.3.0 → chock 0.9.0 → the adopters). .framework-ref moves v0.8.0 → v0.9.0; requirements/chock.in follows chock's pyproject.toml at that tag (agentseam 0.2.1 → 0.3.0), and requirements/chock.txt is regenerated by pip-compile with hashes for the 0.3.0 wheel, header kept in the form the other locks under requirements/ carry. Everything else in the diff is chock sync --repo . on the 0.9.0 release wheel, committed as it came out: the four policies that declare on: [commit, tool_use] gain pre-tool-use/ and stop/ compiled artifacts (the write-path gate and turn-end backstop 0.9.0 emits for content policies, which 0.8.0 compiled to nothing); the ten .chock/bin/ runtimes and gate.py are rebuilt with agentseam 0.3.0 and now refuse rather than fall through when the judge crashes; this repo's own vendor configs gain the new entries (.claude/settings.json gets Stop beside PreToolUse; gemini, codex, devin, tabnine and .agents/hooks.json get theirs); chock.lock follows. One derived change in a published word: in .chock/coverage.json the claude and gemini cells for those four policies move from enforced-at-commit to best-effort with a stated basis, because the write-path hook is now installed and credited at the word its evidence can back — the commit hook underneath is unchanged, and stop credits nothing. No figure script reads chock state, so docs/figures/ is untouched. Nothing under .github/workflows/ changed: the policies job reads the pin from .framework-ref, which is the point of that file.

Definition of done

• python -m ruff check . and python -m ruff format --check . clean — All checks passed!, 240 files already formatted
• python -m pytest -q green; new checks have attack + ordinary-data tests — 407 passed, 1 skipped; no check added
• Schema changes: spec/attestation/v0.1/schema.json and its example stay in sync — no schema change
• chock check and chock sync --repo . --check clean, if .agents/policies/ changed — both clean on chock 0.9.0 ([PASS] All checks passed., Compiled artifacts match their manifests.); .agents/policies/ itself is unchanged, the compiled output under .chock/ is what moved

Claims

• No row is described as re-derivable unless it actually recomputes from the subject plus its recorded configuration and carries an inputHash. A row that could not be measured says NotAvailable, Error, or NotApplicable and why. — no row or measurement changes in this PR; it touches the engine pin and its generated output only

🤖 Generated with Claude Code