AI coding audit tool Chron hits 6,000 downloads with offline compliance logging

·1 views

Chron, an open-source MCP server built for AI coding compliance, surpassed 6,139 downloads without any fundraising or external backing. The tool runs locally alongside AI coding assistants like Claude Code and Cursor, logging every message, code change, and detected secret in a tamper-evident SQLite database. It generates static HTML audit reports mapped to frameworks such as SOC 2, ISO 27001, and the EU AI Act, requiring no cloud connection or login. A deterministic risk-scoring system rates each AI session from 0 to 100 based on signals like secret exposure and infrastructure changes, helping security teams triage 90 days of sessions in under a minute. The latest release also adds a pattern-detection command that flags recurring risks across sessions, with stable output keys designed for future SIEM integration.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Guide Released for Integrating PDF Tamper Detection API into ASP.NET Core Apps

A technical integration guide has been published for developers building PDF fraud detection into ASP.NET Core applications using the HTPBE tamper detection API. The guide targets .NET 8 and walks through a two-step API flow — submitting a PDF URL via POST and retrieving a verdict via GET — returning one of three statuses: intact, modified, or inconclusive. It covers a typed HTTP client built on IHttpClientFactory, snake_case JSON record DTOs, API key configuration, and a Polly-based retry policy for handling transient errors. A DocumentGate component is also introduced to translate the three verdicts into accept, reject, or review decisions for documents claiming institutional origin such as bank statements or payslips. The guide positions the tool as a structural forgery detection layer that complements existing KYC and identity verification stacks rather than replacing them.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Open-Source Event Bus Links 32 MCP Servers Across Kenya's Public Coordination Domains

A developer has released africa-coord-bus, an open-source coordination layer designed to connect 32 Model Context Protocol servers built for Kenya's public service domains, including health, water, agriculture, and transport. Previously, each server operated in isolation, meaning a cholera outbreak flagged in Kisumu would not automatically trigger responses from water quality, emergency supply, or procurement systems. The package introduces a standard CoordinationEvent schema and an EventBus that routes cross-domain signals based on explicit, configurable rules. Unlike Western tech ecosystems that rely on years of existing API integrations, East African digital infrastructure is being built from scratch on MCP, making a shared coordination layer essential from the outset. The tool is available for installation via PyPI, with source code hosted on GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Postman Has Changed Significantly Since 2022: Key Updates Developers Should Know

Postman has undergone major interface and feature changes that render much older documentation and tutorials outdated or inaccurate. The previously separate Tests and Pre-request Script tabs have been consolidated into a single Scripts tab, though the underlying test code remains the same. Postman now offers its own official CLI tool alongside the long-standing Newman runner, while Newman cannot handle the newer v3 YAML collection format introduced in Postman v12. On the CI/CD front, modern Jenkins requires Java 21, and many teams are replacing dedicated Jenkins servers with lightweight GitHub Actions workflows. Postman has also introduced an AI assistant called Postbot that can auto-generate tests, though developers are cautioned to validate generated assertions against specifications rather than assuming current API behaviour is correct.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

EU Cyber Rules Force Industrial Firms to Rethink Legacy Hardware Security Strategies

The convergence of EU regulations including the Cyber Resilience Act, NIS2, and DORA is creating a compliance crisis for organizations running long-established embedded product lines. Many firms already possess technical awareness of their vulnerabilities — such as legacy chips lacking cryptographic isolation — but lack the decision-making frameworks and funding to act on them. Institutional risk-aversion tends to suppress disclosure rather than drive remediation, while capital allocation processes are poorly suited to handling open-ended compliance costs. Manufacturing companies face a particularly acute challenge, as their product lines are tied to long depreciation cycles and capital-intensive supply chains. The paper argues that the transition must be treated as a managed capital process, with interim technical measures used to extend compliant service life rather than forcing abrupt, disruptive overhauls.

0 comments Read more at DEV Community