The first stable release. Full v1 rule set, seven commands, and CI integration. Everything needed to score a repo, understand the findings, fix what’s auto-fixable, and gate CI on the result.Hard caps: raw secret →
18 Rules
Complete v1 rule set across context, secrets, MCP safety, agent config, environment, CI, testing, autonomy, and governance. Full reference at /rules/overview.
7 Commands
init · doctor · explain · report · fix · suppress · version — everything from first scaffold to CI gate.GitHub Action
use-charter/charter-action@v1 — runs charter doctor, uploads SARIF to GitHub Code Scanning, and fails the check at your configured threshold.HTML Report
Self-contained offline HTML report with embedded fonts. WCAG 2.2 AA compliant. No server required — share the file directly.
Commands
charter doctor— full scan with styled TTY output, interactive TUI (-i), SARIF / JSON / Markdown / HTML outputcharter init— scaffold missing agent context files in under 2 minutescharter fix— diff-first auto-fix forAE-CTX-001,AE-CTX-004,AE-CI-002,AE-MCP-001charter report— self-contained offline HTML report (WCAG 2.2 AA, embedded fonts)charter explain— rule metadata lookup by rule IDcharter suppress— governed suppression with reason, expiry, and approver fieldscharter version— build metadata (version, commit, date, Go version, platform)
Score formula
≤ 49, any Blocker → ≤ 59. Fixed for the v1 major version.Distribution
- Homebrew:
brew install use-charter/tap/charter - GitHub Action:
use-charter/charter-action@v1 - Signed releases: cosign keyless signing, SLSA Level 3 provenance, SPDX 2.3 SBOM on every build artifact