Agent contract lockfile
Lock the observed agent-contract surface.
Fetch the observed agent-contract lockfile (coderifts.lock v1), or check MCP drift of a locked manifest against a live one.
If you’ve used package-lock.json, the idea is familiar: coderifts.lock pins the agent-contract surface your agents actually touched, so you can tell when it drifts.
What coderifts lock creates
The CLI fetches the observed agent-contract lockfile from GET /api/v1/lock. Lock v1 records agents/ops, not MCP tool bodies.
README boundary: write mode requires a cloud API key.
Drift detection with --check
--check compares a locked MCP manifest against a live one with scoreMcpRisk. It is monitor only — it does not block.
Unreachable live → status unreachable (not drift).
--check exit codes: 0 unchanged; 3 drift; 2 unreachable / missing locked or live (not clean); 1 usage/error.
How to use it
The CLI README gives these commands for creating the lockfile and checking a locked manifest against a live manifest:
coderifts lock owner/repo
coderifts lock --check --locked-manifest mcp.json --live-manifest live.json