What happened
Chainguard MCP is now GA: four MCP servers (cg-oci, cg-apk, cg-versions, cg-api) give coding agents verified artifact/version/policy answers at dependency-selection time, with server-side governance. Also beta: Workspaces (hardened microVM agent dev environments with in-flight credential injection and egress policy) and Checks (signed-attestation zero-trust CI that gates agent loops).
Why it matters
Treats the security problem as trust in the supply chain agents pull from, rather than prompt guardrails — a distinct Security-of-AI approach for the agentic SDLC; MCP GA is directly usable today with Claude Code/Cursor.
Applicability
DevSecOps and platform teams running agentic coding should adopt Chainguard MCP immediately; evaluate Workspaces/Checks for isolating coding agents from corporate credentials.