Chron tool logs AI coding sessions locally to help teams meet SOC 2 audit requirements

A team has launched Chron, an MCP server that records structured logs of AI coding assistant activity — including file changes, tool calls, and masked credentials — to a local SQLite database without sending data externally. The tool addresses a growing compliance gap for SOC 2-regulated teams, as AI tools increasingly touch sensitive areas like authentication code, Terraform configs, and deployment pipelines with no audit trail. A built-in review command scans session history against SOC 2 Trust Services Criteria using pure pattern matching, with no AI model inference or external API calls involved. Findings are categorized by severity and assigned stable IDs, allowing teams to accept, dismiss, or resolve them with notes across review cycles. The developers explicitly note the tool is not a compliance certification and is intended to surface evidence for human control-owners and auditors.