CrossCheck v4 · compatibility
Keep the same database engine, ORM, authentication provider and package manager decisions as you switch tools. Six adapters consult one local contract. An intentional migration opened by the owner applies to every adapter immediately.
| Agent | Before supported writes | After edits | Shared context | Git / GitHub CI |
|---|---|---|---|---|
| Claude Code | Native deny hook | Local scan + blocking feedback | Project MCP registration | Available to all |
| OpenAI Codex | Native deny hook | Local scan + blocking feedback | Project MCP registration | Available to all |
| Cursor | Native deny hook | Local scan + agent context | Project MCP registration | Available to all |
| GitHub Copilot / VS Code (Preview) | Native deny hook | Local scan + blocking feedback | Project MCP registration | Available to all |
| Gemini CLI | Native deny hook | Local scan + blocking feedback | Project MCP registration | Available to all |
| Windsurf / Cascade | Native deny hook | Local scan + visible feedback | MCP: manual user setup | Available to all |
Recognized, unambiguous proposed edits can be denied before writing. Post-edit checks cannot undo changes. Ambiguous migration text, unfamiliar tool payloads and arbitrary shell scripts depend on the repository scan. This is a narrow decision guard, not general code reasoning or a security sandbox.
Local hooks do not prove remote coverage. Commit the CrossCheck workflow and its offline runtime, then require its check in GitHub branch rules. Review changes to the decision contract and workflow. Generic ChatGPT, other agents and remote sessions can use this boundary; we do not claim a native local hook for them.
The installer detects project and user configuration. Use --all or --agent cursor to select explicitly. Rerun it after adding an agent or moving a clone. Existing hooks, rules and MCP servers are preserved; malformed configuration gets a manual repair message.
node crosscheck-install.mjs node .zfinia/crosscheck-manage.mjs agents node .zfinia/crosscheck-manage.mjs doctor --json
MCP reads decisions, checks proposals and shows bounded history. It exposes no operation to change a decision or authorize a migration. Runtime protection remains local and works without zfinia.com after installation.
Trust the project and review exact definitions in /hooks; new or changed hooks are skipped until trusted. Check /mcp.
Official hook documentationVS Code hooks are Preview. Enable hooks if disabled by settings or policy; trust the workspace and MCP server. No Copilot cloud hook coverage is claimed.
Official hook documentationTrust the project folder, review changed project hooks and approve MCP in Gemini CLI.
Official hook documentationReview workspace hooks and restart Cascade if needed. MCP registration is manual in ~/.codeium/windsurf/mcp_config.json; no global configuration is changed.
Official hook documentation