Act on this, mostly signal

hlock pins Claude Code MCP servers, plugins and model into a lockfile

What to do

Commit a harness.lock file to sync your Claude Code setup across machines. The Apache-2.0 CLI is open source.

Why

The author discloses that Union.ai funds the project.

What the research found

hlock is an open source Apache-2.0 CLI that pins Claude Code MCP servers, plugins and default model into a committable harness.lock file, written by a Union.ai employee who discloses the company funds the project.

Claims and how well the evidence supports them

hlock pins Claude Code MCP servers, plugins and default model into a committable harness.lock file 89%
Claude Code co-authored 84 of 171 commits in the hlock repo 99%
hlock is open source under Apache-2.0 and installable via pip install hlock 99%
Secrets in MCP env vars are replaced with HLOCK_SECRET placeholders 93%

Evidence

github.com https://github.com/unionai-oss/hlock
reddit.com https://reddit.com/r/ClaudeAI/comments/1xbw03y/i_got_tired_of_syncing_my_custom_claude_code

Actionability rated medium.