docs(readme): canonical kill-switch tagline (TAG-1)

[jothimani-rajendran]

Summary

Puts the per-agent canonical tagline at the top of the README, as the bold line. The old descriptive sentence stays unchanged as a plain line directly below it. Nothing else changes.

Decision (owner, 2026-10-13): Tagline: A kill switch for your coding agent's wrong moves. Plugin repos use the per-agent form A kill switch for your <Agent> agent's wrong moves. "Kill switch" only where the engine's tier data gives the agent a pre-action block.

Owner authorization 2026-10-13: these READMEs are hand-maintained; edit the tagline line directly, that line only.

Source: org-plan plan/one-oh-gaps.md, TAG-1. The orchestrator's review asked to keep the technical line.

Line	Old	New
README.md:7	<strong>Chock policies as Cursor plugins — guards ship a real beforeShellExecution deny hook, gates judge the write at preToolUse.</strong>	<strong>A kill switch for your Cursor agent's wrong moves.</strong>
README.md:8	—	Chock policies as Cursor plugins — guards ship a real beforeShellExecution deny hook, gates judge the write at preToolUse. (the old sentence, unchanged, no longer bold)

Tier basis: chock's tier data (agentseam tier_table at the version chock pins, bebbfa6) gives cursor: block+rewrite, enforceable, configurable, live-run-partial. That is a pre-action block, so the kill-switch form applies.

Sub-line (owner can veto): the sub-line is scoped to the chock README and the site hero, so it is not added here.

Checks

• chock marketplace build --dist . --check --tree cursor, run at the catalog's .framework-ref a2dd3de, printed "Marketplace index matches the plugin tree (31 plugins)."
• git grep -n "guardrails for AI coding agents" → 0 hits.
• Generated-only/verify is red, but not because of this PR: generated files have drifted from the catalog, and the check is already red on main (see the comment below).

🤖 Generated with Claude Code

[jothimani-rajendran]

Generated-only / verify is red, but not because of this PR. The regenerate-and-diff step fails on generated plugin files, not on README.md.

• The CI log's diff is in files such as cursor/verify-mcp-allowlist/scripts/* and SKILL.md. These are catalog content published since this tree was last built.
• The same check already failed on the main push at 4f93ddf (run 35922447818).
• The rebuild never regenerates README.md, so this edit survives it. Locally, at the catalog's .framework-ref a2dd3de, marketplace build --check passes on 31 plugins.

There is no fix for this in an agent PR. The tree goes green after a catalog republish, which is an owner-triggered publish.

---

Generated by Claude Code