speclock

Overview

SpecLock prevents AI coding assistants from violating project constraints by analyzing requests semantically and blocking actions that violate defined rules. It supports both advisory and hard enforcement modes, with enterprise features including AES-256-GCM encryption, HMAC audit chains, and RBAC. The system uses semantic analysis rather than keyword matching to detect euphemistic attacks, temporal evasion, and compound sentence violations.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• speclock_init

  Initialize SpecLock in project

  Try:Initialize SpecLock for my projectTry:Set up SpecLock protection
• speclock_get_context

  Get full context pack including goals and locks

  Try:Show me all current project constraintsTry:What rules are currently enforced in this project?
• speclock_set_goal

  Set project goal

  Try:Set project goal to build an e-commerce siteTry:Update project objective to create a mobile app
• speclock_add_lock

  Add constraint and auto-guard files

  Try:Add lock to never modify auth filesTry:Create constraint to prevent database changes
• speclock_remove_lock

  Soft-delete a lock

  Try:Remove the constraint on auth filesTry:Delete the payment system lock
• speclock_add_decision

  Record architectural decision

  Try:Document decision to use PostgreSQLTry:Record architecture choice for authentication
• speclock_add_note

  Add pinned note to project

  Try:Add note about API version compatibilityTry:Pin reminder about third-party dependencies
• speclock_set_deploy_facts

  Record deployment configuration

  Try:Set deployment facts for production environmentTry:Update deployment configuration
• speclock_check

  Test if an action would conflict with locks

  Try:Check if modifying auth files would violate rulesTry:Would changing the database schema be allowed?
• speclock_list_locks

  Show all current locks

  Try:List all current project constraintsTry:Show me all active locks
• speclock_enforce

  Change enforcement mode between hard and advisory

  Try:Set enforcement to hard modeTry:Switch to advisory warnings
• speclock_override

  Override a lock with a reason

  Try:Override auth lock for JIRA-1234Try:Temporarily allow database changes

Comparable tools

Installation

npx speclock protect              # Install in your project
speclock mcp install claude-code  # Wire up MCP for Claude Code
speclock doctor                   # Verify everything is set up correctly

{
  "mcpServers": {
    "speclock": {
      "command": "npx",
      "args": ["-y", "speclock", "serve", "--project", "."]
    }
  }
}

FAQ

How does SpecLock differ from AI memory tools?

Unlike memory tools that only remember context, SpecLock actively enforces constraints and blocks AI from violating project rules.

What enforcement modes are available?

SpecLock offers advisory mode (default, shows warnings) and hard mode (blocks violations with MCP errors).

On Hacker News

Recent discussion from the developer community.

• Show HN: SpecLock – AI Constraint Engine that stops AI from breaking locked code▲ 1
  Story by sgroy10 · 2026-03-01
• SpecLock – Your Claude.md is a suggestion. This makes it a law▲ 2💬 1
  Story by sgroy10 · 2026-04-08
• Show HN: SpecLock – Constraint enforcement for AI coding tools (Bolt.new, Claude▲ 1
  Story by sgroy10 · 2026-02-26

Compare speclock with