Release notes

HOL Guard v3.0.0a278

Preview

Published August 26, 2026Original GitHub release for alpha/v3.0.0a278

Documented changes

40 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.0.0a278 is a preview release published 2026-08-26. Upstream documents: Guard 3.0.0a278 is an opt-in prerelease cut from [`380fb7a`](https://github.com/hashgraph-online/hol-guard/commit/380fb7a330f4cc893a3c398fa8894c8ca6a9403a). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a277](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a277). Its comparison base is alpha/v3.0.0a277. It includes 38 verified contribution deliveries with public evidence links. Attribution for this release is being ve

Changes

Other changes40

Other changes

Documented change: Guard 3.0.0a278 is an opt-in prerelease cut from [`380fb7a`](https://github.com/hashgraph-online/hol-guard/commit/380fb7a330f4cc893a3c398fa8894c8ca6a9403a). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a277](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a277). Evidence for: Documented change: Guard 3.0.0a278 is an opt-in prerelease cut from [`380fb7a`](https://github.com/hashgraph-online/hol-guard/commit/380fb7a330f4cc893a3c398fa8894c8ca6a9403a). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a277](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a277).
**release**: Reconcile latest main into 3.0 ([#2606](https://github.com/hashgraph-online/hol-guard/pull/2606)) Evidence for: **release**: Reconcile latest main into 3.0 ([#2606](https://github.com/hashgraph-online/hol-guard/pull/2606))
Merged pull request #2427: perf(hooks): prefer the verified native macOS Desktop proxy (#2427) Evidence for: Merged pull request #2427: perf(hooks): prefer the verified native macOS Desktop proxy (#2427)
Merged pull request #2515: fix(guard): persist exact approval decisions (#2515) Evidence for: Merged pull request #2515: fix(guard): persist exact approval decisions (#2515)
Merged pull request #2606: chore(release): reconcile latest main into 3.0 Evidence for: Merged pull request #2606: chore(release): reconcile latest main into 3.0
Merged pull request #2418: fix(hooks): harden frozen bridge dispatch on main (#2418) Evidence for: Merged pull request #2418: fix(hooks): harden frozen bridge dispatch on main (#2418)
Merged pull request #2490: fix(guard): restore watch-only recovery reads (#2490) Evidence for: Merged pull request #2490: fix(guard): restore watch-only recovery reads (#2490)
Merged pull request #2468: fix(daemon): make startup rollback transactional (#2468) Evidence for: Merged pull request #2468: fix(daemon): make startup rollback transactional (#2468)
Merged pull request #2495: docs: add CITATION.cff for GitHub cite-this-repository (#2495) Evidence for: Merged pull request #2495: docs: add CITATION.cff for GitHub cite-this-repository (#2495)
Merged pull request #2412: fix(dashboard): quiet sidebar alpha channel footer with deliberate link underline (#2412) Evidence for: Merged pull request #2412: fix(dashboard): quiet sidebar alpha channel footer with deliberate link underline (#2412)
Merged pull request #2423: fix(update): preserve managed install authority (#2423) Evidence for: Merged pull request #2423: fix(update): preserve managed install authority (#2423)
Merged pull request #2510: fix(store): bind sqlite recovery to failed database identity (#2510) Evidence for: Merged pull request #2510: fix(store): bind sqlite recovery to failed database identity (#2510)
Merged pull request #2432: feat(grok): align adapter with current hook surface (#2432) Evidence for: Merged pull request #2432: feat(grok): align adapter with current hook surface (#2432)
Merged pull request #2433: fix(runtime): allow bounded worktree setup commands Evidence for: Merged pull request #2433: fix(runtime): allow bounded worktree setup commands
Merged pull request #2534: fix(dashboard): validate cloud recovery links (#2534) Evidence for: Merged pull request #2534: fix(dashboard): validate cloud recovery links (#2534)
Merged pull request #2473: fix(daemon): recover dashboard after stale process exit (#2473) Evidence for: Merged pull request #2473: fix(daemon): recover dashboard after stale process exit (#2473)
Merged pull request #2479: fix(guard): preserve remembered approvals and runtime version (#2479) Evidence for: Merged pull request #2479: fix(guard): preserve remembered approvals and runtime version (#2479)
Merged pull request #2408: fix(zcode): write current hooks.events schema in managed hook install (#2408) Evidence for: Merged pull request #2408: fix(zcode): write current hooks.events schema in managed hook install (#2408)
Merged pull request #2480: fix(command): classify routine origin fetch in Git protection (#2480) Evidence for: Merged pull request #2480: fix(command): classify routine origin fetch in Git protection (#2480)
Merged pull request #2518: fix(guard): allow bounded guidance reads (#2518) Evidence for: Merged pull request #2518: fix(guard): allow bounded guidance reads (#2518)
Merged pull request #2482: fix(guard): preserve package approvals across shim repair (#2482) Evidence for: Merged pull request #2482: fix(guard): preserve package approvals across shim repair (#2482)
Merged pull request #2603: fix(release): copy Cloud Review artifacts into Desktop Core freeze (#2603) Evidence for: Merged pull request #2603: fix(release): copy Cloud Review artifacts into Desktop Core freeze (#2603)
Merged pull request #2512: feat(scanner): complete native DeepSeek Harness support (#2512) Evidence for: Merged pull request #2512: feat(scanner): complete native DeepSeek Harness support (#2512)
Merged pull request #2409: fix(hooks): support frozen CLI bridge launch Evidence for: Merged pull request #2409: fix(hooks): support frozen CLI bridge launch
Merged pull request #2415: fix(release): publish matching scanner versions Evidence for: Merged pull request #2415: fix(release): publish matching scanner versions
Merged pull request #2570: fix(store): keep CLI usable when extension schema mismatches (#2570) Evidence for: Merged pull request #2570: fix(store): keep CLI usable when extension schema mismatches (#2570)
Merged pull request #2532: fix(dashboard): start OAuth from protection recovery (#2532) Evidence for: Merged pull request #2532: fix(dashboard): start OAuth from protection recovery (#2532)
Merged pull request #2487: docs: cite HOL Plugin Security Hugging Face dataset on main (#2487) Evidence for: Merged pull request #2487: docs: cite HOL Plugin Security Hugging Face dataset on main (#2487)
Merged pull request #2453: fix(guard): recover stuck local protection hooks and evidence (#2453) Evidence for: Merged pull request #2453: fix(guard): recover stuck local protection hooks and evidence (#2453)
Direct commit 2a6f26b812e4: perf(hooks): prefer the trusted native Desktop proxy Evidence for: Direct commit 2a6f26b812e4: perf(hooks): prefer the trusted native Desktop proxy
Merged pull request #2424: fix(github): allow bounded merged-branch cleanup Evidence for: Merged pull request #2424: fix(github): allow bounded merged-branch cleanup
Merged pull request #2454: feat(scanner): support native Kimi plugins (#2454) Evidence for: Merged pull request #2454: feat(scanner): support native Kimi plugins (#2454)
Direct commit 8bbf0f261d97: fix(hooks): validate frozen bridge before daemon dispatch Evidence for: Direct commit 8bbf0f261d97: fix(hooks): validate frozen bridge before daemon dispatch
Merged pull request #2576: fix(update): retain verified newer desktop runtime (#2576) Evidence for: Merged pull request #2576: fix(update): retain verified newer desktop runtime (#2576)
Merged pull request #2413: perf(hooks): prefer the verified native macOS Desktop proxy (#2413) Evidence for: Merged pull request #2413: perf(hooks): prefer the verified native macOS Desktop proxy (#2413)
Direct commit 125191e35dbc: docs: cite HOL Plugin Security dataset on main Evidence for: Direct commit 125191e35dbc: docs: cite HOL Plugin Security dataset on main
Direct commit 1729378c2efe: docs: add CITATION.cff for GitHub cite-this-repository Evidence for: Direct commit 1729378c2efe: docs: add CITATION.cff for GitHub cite-this-repository
Merged pull request #2484: fix(guard): stabilize remembered npx approvals (#2484) Evidence for: Merged pull request #2484: fix(guard): stabilize remembered npx approvals (#2484)
Merged pull request #2485: fix(command): classify staged Git index inspection (#2485) Evidence for: Merged pull request #2485: fix(command): classify staged Git index inspection (#2485)
Merged pull request #2581: fix(update): preserve newer runtime artifacts (#2581) Evidence for: Merged pull request #2581: fix(update): preserve newer runtime artifacts (#2581)

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.0.0a277

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.