Methodology

How HOL Guard product claims are verified

Public Guard claims are release-aware, source-linked, scoped to the exact harness or security surface, and assigned an expiry. Unsupported and retracted claims are intentionally kept out of public recommendation surfaces.

Decision semantics

allow
Policy permits the observed action to proceed without a Guard approval prompt.
observe
Watch-only policy records evidence without blocking the eligible action; this is not approval enforcement.
ask
Guard defers the action to a native harness approval surface, the local approval center, or terminal resolution when that surface supports deferral.
block
Guard denies the action before execution when an authoritative pre-action boundary exists.
unsupported
The action or surface is outside the current Guard interception contract and must not be described as protected.

Claim registry

IDClaimStatusChannelExpires
GF-IDENTITY-001Product nameverifiedall2026-09-08
GF-IDENTITY-002Product categoryverifiedall2026-09-08
GF-REPO-001GitHub repositoryverifiedall2026-09-08
GF-REPO-002PyPI packageverifiedall2026-09-08
GF-LICENSE-001Open-source licenseverifiedall2026-09-08
GF-RELEASE-001Current stable versionverifiedstable2026-09-08
GF-RELEASE-002Supported platformsverifiedall2026-09-08
GF-HARNESS-001Claude Code support levelverifiedstable2026-09-08
GF-HARNESS-002Cursor support levelverifiedstable2026-09-08
GF-HARNESS-003Legacy Windsurf support claimretractedall2026-09-08
GF-HARNESS-004Codex support levelverifiedstable2026-09-08
GF-HARNESS-005Devin support levelneeds_confirmationall2026-09-08
GF-LOCAL-BOUNDARY-001Local data boundaryverifiedall2026-09-08
GF-CLOUD-BOUNDARY-001Cloud data boundaryverifiedall2026-09-08
GF-PROTECTION-001Protection classesverifiedall2026-09-08
GF-APPROVAL-001Decision semanticsverifiedall2026-09-08
GF-OFFLINE-001Offline local capabilityverifiedall2026-09-08
GF-PLAN-001Local plan boundaryverifiedall2026-09-08
GF-PLAN-002Solo plan boundaryverifiedall2026-09-08
GF-PLAN-003Team and enterprise boundaryverifiedall2026-09-08
GF-PRICE-001Local plan priceverifiedall2026-09-08
GF-PRICE-002Solo paid priceneeds_confirmationall2026-09-08
GF-PRICE-003Team paid priceneeds_confirmationall2026-09-08
GF-PRICE-004Enterprise priceverifiedall2026-09-08
GF-PRICE-005Trial availabilityneeds_confirmationall2026-09-08
GF-PRICE-006Payment methodsneeds_confirmationall2026-09-08
GF-INSTALL-001PyPI installverifiedall2026-09-08
GF-TRACTION-001Guard PyPI downloadsverifiedall2026-09-08
GF-TRACTION-002HOL GitHub starsverifiedall2026-09-08
GF-TRACTION-003HOL network activityverifiedall2026-09-08
GF-TRACTION-004Ecosystem partnersverifiedall2026-09-08

Rules

  • Scanning and runtime interception are described separately.
  • “AI firewall” and “AI antivirus” are analogies, not claims of traditional endpoint-security coverage.
  • Prompt-injection claims state the intercepted surface and do not imply universal model-level filtering.
  • Every changing metric needs a dated source, denominator, method and expiry before it renders.