Documented changes
185 typed entries
Verified contributors
Credits being verified. Attribution coverage is in progress.
Attribution coverage
attribution in progress; history inventory partial.
Install
Scope
Guard v3.1.0a13 is a preview release published 2026-08-16. Upstream documents: Guard 3.1.0a13 is an opt-in prerelease cut from [`0fb9c97`](https://github.com/hashgraph-online/hol-guard/commit/0fb9c97cfe5be5f4742f7e126c6e96c0a26b19f6). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.1.0a12](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.1.0a12). It includes 181 verified contribution deliveries with public evidence links. Attribution for this release is being verified.
Changes
Fixed
3- **release**: Checkout before prerelease verification ([#2431](https://github.com/hashgraph-online/hol-guard/pull/2431)) Evidence for: **release**: Checkout before prerelease verification ([#2431](https://github.com/hashgraph-online/hol-guard/pull/2431))
- check out the release branch before verifying the reserved alpha tag Evidence for: check out the release branch before verifying the reserved alpha tag
- keep prerelease asset creation bound to the exact release source Evidence for: keep prerelease asset creation bound to the exact release source
Other changes
182- Documented change: Guard 3.1.0a13 is an opt-in prerelease cut from [`0fb9c97`](https://github.com/hashgraph-online/hol-guard/commit/0fb9c97cfe5be5f4742f7e126c6e96c0a26b19f6). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.1.0a12](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.1.0a12). Evidence for: Documented change: Guard 3.1.0a13 is an opt-in prerelease cut from [`0fb9c97`](https://github.com/hashgraph-online/hol-guard/commit/0fb9c97cfe5be5f4742f7e126c6e96c0a26b19f6). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.1.0a12](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.1.0a12).
- Merged pull request #1856: fix(guard): canonicalize hook health identities (#1856) Evidence for: Merged pull request #1856: fix(guard): canonicalize hook health identities (#1856)
- Merged pull request #1748: fix(codex): isolate authenticated hook fallback Evidence for: Merged pull request #1748: fix(codex): isolate authenticated hook fallback
- Merged pull request #1733: fix(codex): inventory every hook before activation Evidence for: Merged pull request #1733: fix(codex): inventory every hook before activation
- Merged pull request #1816: feat(guard): harden extension control migrations Evidence for: Merged pull request #1816: feat(guard): harden extension control migrations
- Merged pull request #1784: feat(controls): enforce resident extension policy Evidence for: Merged pull request #1784: feat(controls): enforce resident extension policy
- Merged pull request #1728: fix(supply-chain): canonicalize package identities Evidence for: Merged pull request #1728: fix(supply-chain): canonicalize package identities
- Merged pull request #2422: fix(release): filter canaries before alpha allocation Evidence for: Merged pull request #2422: fix(release): filter canaries before alpha allocation
- Direct commit df2158357836: fix(guard): backport action enforcement lattice to 2.1 (#1715) Evidence for: Direct commit df2158357836: fix(guard): backport action enforcement lattice to 2.1 (#1715)
- Merged pull request #1752: fix(guard): preserve decoded execution signals (#1752) Evidence for: Merged pull request #1752: fix(guard): preserve decoded execution signals (#1752)
- Merged pull request #1767: fix(guard): harden bounded workflow authorization (#1767) Evidence for: Merged pull request #1767: fix(guard): harden bounded workflow authorization (#1767)
- Merged pull request #2003: feat(guard): add provider self-healing recovery state machine (#2003) Evidence for: Merged pull request #2003: feat(guard): add provider self-healing recovery state machine (#2003)
- Direct commit 4bdc9e8f3d71: feat(guard): define command effect contracts (#1647) Evidence for: Direct commit 4bdc9e8f3d71: feat(guard): define command effect contracts (#1647)
- Merged pull request #1745: fix(git): resolve pathspecs before source policy Evidence for: Merged pull request #1745: fix(git): resolve pathspecs before source policy
- Merged pull request #2029: feat(guard): add pinned gVisor reference runtime (#2029) Evidence for: Merged pull request #2029: feat(guard): add pinned gVisor reference runtime (#2029)
- Merged pull request #1749: chore(release): sync main into release 2.2 (#1749) Evidence for: Merged pull request #1749: chore(release): sync main into release 2.2 (#1749)
- Merged pull request #1687: test: synchronize cloud reconnect completion (#1669) (#1687) Evidence for: Merged pull request #1687: test: synchronize cloud reconnect completion (#1669) (#1687)
- Merged pull request #1988: docs(guard): add execution-path, harness-grade, and sandbox-required inventories (#1988) Evidence for: Merged pull request #1988: docs(guard): add execution-path, harness-grade, and sandbox-required inventories (#1988)
- Merged pull request #1719: fix(guard): backport isolated updater execution to 2.1 (#1719) Evidence for: Merged pull request #1719: fix(guard): backport isolated updater execution to 2.1 (#1719)
- Merged pull request #1709: fix(codex): enforce native shell hook boundary Evidence for: Merged pull request #1709: fix(codex): enforce native shell hook boundary
- Merged pull request #2013: fix(guard): close G2 provider-trust, boundary, and receipt findings (#2013) Evidence for: Merged pull request #2013: fix(guard): close G2 provider-trust, boundary, and receipt findings (#2013)
- Merged pull request #1712: fix(guard): contain pytest repository execution Evidence for: Merged pull request #1712: fix(guard): contain pytest repository execution
- Merged pull request #1901: chore(release): merge main into 3.1 Evidence for: Merged pull request #1901: chore(release): merge main into 3.1
- Merged pull request #2077: feat(desktop): add privacy-safe bootstrap contract (#2077) Evidence for: Merged pull request #2077: feat(desktop): add privacy-safe bootstrap contract (#2077)
- Merged pull request #1652: test(guard): add deterministic command corpora (#1652) Evidence for: Merged pull request #1652: test(guard): add deterministic command corpora (#1652)
- Merged pull request #2428: fix(release): tolerate TestPyPI capacity limits Evidence for: Merged pull request #2428: fix(release): tolerate TestPyPI capacity limits
- Merged pull request #1781: feat(controls): harden authority enrollment proofs Evidence for: Merged pull request #1781: feat(controls): harden authority enrollment proofs
- Merged pull request #1766: feat(mdm): add portable conformance lab (#1766) Evidence for: Merged pull request #1766: feat(mdm): add portable conformance lab (#1766)
- Merged pull request #1768: feat(guard): persist extension control authority (#1768) Evidence for: Merged pull request #1768: feat(guard): persist extension control authority (#1768)
- Merged pull request #2080: feat(guard): add portable Linux backends for 3.0 (#2080) Evidence for: Merged pull request #2080: feat(guard): add portable Linux backends for 3.0 (#2080)
- Merged pull request #2076: feat(guard): define network mediation contracts (#2076) Evidence for: Merged pull request #2076: feat(guard): define network mediation contracts (#2076)
- Merged pull request #2088: test(ci): lock release/3.1 alpha push contract (#2088) Evidence for: Merged pull request #2088: test(ci): lock release/3.1 alpha push contract (#2088)
- Merged pull request #2038: test(evidence): refresh decision diff source binding Evidence for: Merged pull request #2038: test(evidence): refresh decision diff source binding
- Merged pull request #1714: feat(guard): contain exact local checks (#1714) Evidence for: Merged pull request #1714: feat(guard): contain exact local checks (#1714)
- Merged pull request #2071: fix(cloud): clarify optional local-only mode (#2071) Evidence for: Merged pull request #2071: fix(cloud): clarify optional local-only mode (#2071)
- Merged pull request #1724: feat(guard): enforce action-aware approval scopes (#1724) Evidence for: Merged pull request #1724: feat(guard): enforce action-aware approval scopes (#1724)
- Merged pull request #1853: fix(guard): make protection repair converge (#1853) Evidence for: Merged pull request #1853: fix(guard): make protection repair converge (#1853)
- Merged pull request #1759: fix(guard): trust exact runtime interpreter aliases Evidence for: Merged pull request #1759: fix(guard): trust exact runtime interpreter aliases
- Merged pull request #1761: feat(guard): authorize bounded workflow maintenance (#1761) Evidence for: Merged pull request #1761: feat(guard): authorize bounded workflow maintenance (#1761)
- Merged pull request #1755: fix(guard): attest exact Python interpreter identity (#1755) Evidence for: Merged pull request #1755: fix(guard): attest exact Python interpreter identity (#1755)
- Merged pull request #1703: fix(guard): harden launch identity drift observations (#1703) Evidence for: Merged pull request #1703: fix(guard): harden launch identity drift observations (#1703)
- Merged pull request #1860: fix(macos): bind cached trust to live daemon (#1860) Evidence for: Merged pull request #1860: fix(macos): bind cached trust to live daemon (#1860)
- Merged pull request #1679: feat(guard): add command activity privacy controls (#1679) Evidence for: Merged pull request #1679: feat(guard): add command activity privacy controls (#1679)
- Merged pull request #1865: fix(guard): isolate background keychain access (#1865) Evidence for: Merged pull request #1865: fix(guard): isolate background keychain access (#1865)
- Merged pull request #1880: fix(guard): bound local evidence storage (#1880) Evidence for: Merged pull request #1880: fix(guard): bound local evidence storage (#1880)
- Merged pull request #1849: fix(dashboard): repair protection inline (#1849) Evidence for: Merged pull request #1849: fix(dashboard): repair protection inline (#1849)
- Merged pull request #1699: feat(guard): route extension evidence centrally (#1699) Evidence for: Merged pull request #1699: feat(guard): route extension evidence centrally (#1699)
- Merged pull request #1763: test(release): prove installed command activity (#1763) Evidence for: Merged pull request #1763: test(release): prove installed command activity (#1763)
- Merged pull request #1750: fix(guard): canonicalize npm source identities Evidence for: Merged pull request #1750: fix(guard): canonicalize npm source identities
- Merged pull request #2032: docs(guard): add execution assurance launch gates Evidence for: Merged pull request #2032: docs(guard): add execution assurance launch gates
- Merged pull request #1677: fix(guard): bind approvals to complete skill identity (#1677) Evidence for: Merged pull request #1677: fix(guard): bind approvals to complete skill identity (#1677)
- Merged pull request #1803: feat(controls): sync privacy-safe authority events Evidence for: Merged pull request #1803: feat(controls): sync privacy-safe authority events
- Merged pull request #1791: feat(controls): add extension-control CLI Evidence for: Merged pull request #1791: feat(controls): add extension-control CLI
- Merged pull request #1786: feat(controls): expose guarded daemon API Evidence for: Merged pull request #1786: feat(controls): expose guarded daemon API
- Merged pull request #1965: feat(guard): command-policy exception request support (#1965) Evidence for: Merged pull request #1965: feat(guard): command-policy exception request support (#1965)
- Merged pull request #1686: feat(guard): add command activity dashboard clients (#1686) Evidence for: Merged pull request #1686: feat(guard): add command activity dashboard clients (#1686)
- Merged pull request #1710: fix(guard): enforce npm prerelease range admission (#1710) Evidence for: Merged pull request #1710: fix(guard): enforce npm prerelease range admission (#1710)
- Merged pull request #1740: fix(codex): canonicalize hook migration identity Evidence for: Merged pull request #1740: fix(codex): canonicalize hook migration identity
- Merged pull request #1739: feat(guard): add execution-bound verified reads (#1739) Evidence for: Merged pull request #1739: feat(guard): add execution-bound verified reads (#1739)
- Merged pull request #1705: fix(guard): bind cleared launch environments (#1705) Evidence for: Merged pull request #1705: fix(guard): bind cleared launch environments (#1705)
- Merged pull request #2081: revert: keep HOL Guard 3.0 on alpha branch (#2081) Evidence for: Merged pull request #2081: revert: keep HOL Guard 3.0 on alpha branch (#2081)
- Merged pull request #2070: fix(pi): handle shared temporary workspace roots (#2070) Evidence for: Merged pull request #2070: fix(pi): handle shared temporary workspace roots (#2070)
- Merged pull request #1854: fix(hooks): self-heal daemon-dependent harnesses (#1854) Evidence for: Merged pull request #1854: fix(hooks): self-heal daemon-dependent harnesses (#1854)
- Merged pull request #2425: fix(release): verify nested alpha tag reservations Evidence for: Merged pull request #2425: fix(release): verify nested alpha tag reservations
- Direct commit 9b78e5249493: fix(guard): unify authoritative decision surfaces (#1659) Evidence for: Direct commit 9b78e5249493: fix(guard): unify authoritative decision surfaces (#1659)
- Merged pull request #1707: fix(guard): gate external archive downloads before inspection (#1707) Evidence for: Merged pull request #1707: fix(guard): gate external archive downloads before inspection (#1707)
- Merged pull request #1878: fix(guard): harden daemon hook resilience (#1878) Evidence for: Merged pull request #1878: fix(guard): harden daemon hook resilience (#1878)
- Merged pull request #1667: feat(guard): record command activity lifecycle (#1667) Evidence for: Merged pull request #1667: feat(guard): record command activity lifecycle (#1667)
- Merged pull request #1995: feat(guard): local execution-assurance core contracts, provider, decision extension (#1995) Evidence for: Merged pull request #1995: feat(guard): local execution-assurance core contracts, provider, decision extension (#1995)
- Merged pull request #1775: fix(release): preserve relay half-closes (#1775) Evidence for: Merged pull request #1775: fix(release): preserve relay half-closes (#1775)
- Merged pull request #2031: docs(guard): record gVisor runtime selection (#2031) Evidence for: Merged pull request #2031: docs(guard): record gVisor runtime selection (#2031)
- Merged pull request #1778: fix(ci): stabilize release branch checks Evidence for: Merged pull request #1778: fix(ci): stabilize release branch checks
- Merged pull request #1994: docs(guard): replace internal plan markers with section references (#1994) Evidence for: Merged pull request #1994: docs(guard): replace internal plan markers with section references (#1994)
- Merged pull request #1864: fix(security): bound hook output and static PR proposals (#1864) Evidence for: Merged pull request #1864: fix(security): bound hook output and static PR proposals (#1864)
- Merged pull request #1731: feat(guard): add command decision shadow evaluation (#1731) Evidence for: Merged pull request #1731: feat(guard): add command decision shadow evaluation (#1731)
- Direct commit b4a0248e0af0: Merge pull request #1728 from hashgraph-online/fix/p30-scoped-package-index Evidence for: Direct commit b4a0248e0af0: Merge pull request #1728 from hashgraph-online/fix/p30-scoped-package-index
- Merged pull request #1872: fix(guard): allow safe PR body files (#1872) Evidence for: Merged pull request #1872: fix(guard): allow safe PR body files (#1872)
- Merged pull request #1772: fix(release): run installed containment on host Evidence for: Merged pull request #1772: fix(release): run installed containment on host
- Merged pull request #1718: fix(guard): backport authoritative decision surfaces to 2.1 (#1718) Evidence for: Merged pull request #1718: fix(guard): backport authoritative decision surfaces to 2.1 (#1718)
- Merged pull request #1776: fix(release): keep installed lab daemon alive (#1776) Evidence for: Merged pull request #1776: fix(release): keep installed lab daemon alive (#1776)
- Merged pull request #1861: fix(macos): serve passive trust from daemon state (#1861) Evidence for: Merged pull request #1861: fix(macos): serve passive trust from daemon state (#1861)
- Direct commit e2d2c64099a7: chore(release): sync repository version to 2.0.1114 [skip release publish] Evidence for: Direct commit e2d2c64099a7: chore(release): sync repository version to 2.0.1114 [skip release publish]
- Merged pull request #1866: fix(guard): recover stale cloud request sync (#1866) Evidence for: Merged pull request #1866: fix(guard): recover stale cloud request sync (#1866)
- Merged pull request #2082: feat(guard): restore 3.0 alpha network work (#2082) Evidence for: Merged pull request #2082: feat(guard): restore 3.0 alpha network work (#2082)
- Merged pull request #1867: feat(guard): repair quarantined request sync Evidence for: Merged pull request #1867: feat(guard): repair quarantined request sync
- Merged pull request #1743: feat(guard): contain routine package scripts Evidence for: Merged pull request #1743: feat(guard): contain routine package scripts
- Merged pull request #1723: fix(runtime): model effective cwd across shell segments (#1723) Evidence for: Merged pull request #1723: fix(runtime): model effective cwd across shell segments (#1723)
- Merged pull request #2083: chore(release): resolve main conflicts for 3.0 Evidence for: Merged pull request #2083: chore(release): resolve main conflicts for 3.0
- Merged pull request #1734: fix(runtime): parse pytest configuration semantically Evidence for: Merged pull request #1734: fix(runtime): parse pytest configuration semantically
- Merged pull request #2000: feat(guard): add execution-context propagation and ownership enforcement (#2000) Evidence for: Merged pull request #2000: feat(guard): add execution-context propagation and ownership enforcement (#2000)
- Merged pull request #1857: fix(cursor): preserve global hook state from home (#1857) Evidence for: Merged pull request #1857: fix(cursor): preserve global hook state from home (#1857)
- Merged pull request #2078: feat(guard): add network local core (#2078) Evidence for: Merged pull request #2078: feat(guard): add network local core (#2078)
- Merged pull request #2089: fix(ci): make release/3.1 an idempotent PyPI alpha publisher (#2089) Evidence for: Merged pull request #2089: fix(ci): make release/3.1 an idempotent PyPI alpha publisher (#2089)
- Merged pull request #1729: feat(guard): align approval UX with scope eligibility (#1729) Evidence for: Merged pull request #1729: feat(guard): align approval UX with scope eligibility (#1729)
- Merged pull request #2008: fix(guard): wait for hook worker during bootstrap instead of failing-fast on overload (#2008) Evidence for: Merged pull request #2008: fix(guard): wait for hook worker during bootstrap instead of failing-fast on overload (#2008)
- Merged pull request #1727: fix(opencode): reconstruct MCP overlays from raw servers Evidence for: Merged pull request #1727: fix(opencode): reconstruct MCP overlays from raw servers
- Merged pull request #1742: fix(codex): roll back failed hook migrations Evidence for: Merged pull request #1742: fix(codex): roll back failed hook migrations
- Merged pull request #1877: fix(guard): harden PR body file validation (#1877) Evidence for: Merged pull request #1877: fix(guard): harden PR body file validation (#1877)
- Merged pull request #1851: fix(macos): bound passive keychain reads (#1851) Evidence for: Merged pull request #1851: fix(macos): bound passive keychain reads (#1851)
- Merged pull request #2015: docs(guard): record wave-two local core gate (#2015) Evidence for: Merged pull request #2015: docs(guard): record wave-two local core gate (#2015)
- Merged pull request #1769: fix(guard): migrate command shadow evaluator schema (#1769) Evidence for: Merged pull request #1769: fix(guard): migrate command shadow evaluator schema (#1769)
- Merged pull request #1773: feat(guard): enforce extension controls in command hooks (#1773) Evidence for: Merged pull request #1773: feat(guard): enforce extension controls in command hooks (#1773)
- Merged pull request #1738: fix(runtime): parse env wrappers exactly Evidence for: Merged pull request #1738: fix(runtime): parse env wrappers exactly
- Merged pull request #1721: fix(guard): isolate OpenCode interpreter probes (#1721) Evidence for: Merged pull request #1721: fix(guard): isolate OpenCode interpreter probes (#1721)
- Merged pull request #1883: fix(guard): restore resident hook output review (#1883) Evidence for: Merged pull request #1883: fix(guard): restore resident hook output review (#1883)
- Merged pull request #1941: fix: stabilize hook fallback timing (#1941) Evidence for: Merged pull request #1941: fix: stabilize hook fallback timing (#1941)
- Merged pull request #1715: fix(guard): backport action enforcement lattice to 2.1 (#1715) Evidence for: Merged pull request #1715: fix(guard): backport action enforcement lattice to 2.1 (#1715)
- Merged pull request #1716: fix(guard): backport approval precedence to 2.1 (#1716) Evidence for: Merged pull request #1716: fix(guard): backport approval precedence to 2.1 (#1716)
- Merged pull request #2001: feat(guard): add local terminal record and bounded output review (#2001) Evidence for: Merged pull request #2001: feat(guard): add local terminal record and bounded output review (#2001)
- Merged pull request #1702: fix(updater): preserve daemon refresh handoff (#1702) Evidence for: Merged pull request #1702: fix(updater): preserve daemon refresh handoff (#1702)
- Merged pull request #1762: feat(guard): catalog command extension permissions (#1762) Evidence for: Merged pull request #1762: feat(guard): catalog command extension permissions (#1762)
- Merged pull request #1993: docs(guard): freeze execution-assurance contract set with abuse-case review (#1993) Evidence for: Merged pull request #1993: docs(guard): freeze execution-assurance contract set with abuse-case review (#1993)
- Merged pull request #2036: test(quality): restore release gate hygiene Evidence for: Merged pull request #2036: test(quality): restore release gate hygiene
- Merged pull request #1730: fix(openclaw): merge all MCP server sources Evidence for: Merged pull request #1730: fix(openclaw): merge all MCP server sources
- Merged pull request #2073: refactor(desktop): move persistent tray out of core (#2073) Evidence for: Merged pull request #2073: refactor(desktop): move persistent tray out of core (#2073)
- Merged pull request #1693: feat(dashboard): add command activity assurance views (#1693) Evidence for: Merged pull request #1693: feat(dashboard): add command activity assurance views (#1693)
- Merged pull request #1720: feat(guard): add dormant workflow capability kernel (#1720) Evidence for: Merged pull request #1720: feat(guard): add dormant workflow capability kernel (#1720)
- Merged pull request #2017: feat(dashboard): execution-assurance status, provider detail, and decision explanation UI (#2017) Evidence for: Merged pull request #2017: feat(dashboard): execution-assurance status, provider detail, and decision explanation UI (#2017)
- Merged pull request #2005: feat(guard): add read-only isolation CLI payload builders (#2005) Evidence for: Merged pull request #2005: feat(guard): add read-only isolation CLI payload builders (#2005)
- Merged pull request #1850: fix(hooks): self-heal Codex review failures (#1850) Evidence for: Merged pull request #1850: fix(hooks): self-heal Codex review failures (#1850)
- Merged pull request #1946: fix: calibrate decision diff CI budget (#1946) Evidence for: Merged pull request #1946: fix: calibrate decision diff CI budget (#1946)
- Merged pull request #1876: fix(guard): tolerate removed install workspace (#1876) Evidence for: Merged pull request #1876: fix(guard): tolerate removed install workspace (#1876)
- Merged pull request #1855: fix(guard): ignore inactive hook history (#1855) Evidence for: Merged pull request #1855: fix(guard): ignore inactive hook history (#1855)
- Merged pull request #1751: chore(release): preserve main ancestry in release 2.2 (#1751) Evidence for: Merged pull request #1751: chore(release): preserve main ancestry in release 2.2 (#1751)
- Merged pull request #1725: fix(hermes): separate complete inputs from bounded previews (#1725) Evidence for: Merged pull request #1725: fix(hermes): separate complete inputs from bounded previews (#1725)
- Merged pull request #1696: feat(guard): report truthful protection health (#1696) Evidence for: Merged pull request #1696: feat(guard): report truthful protection health (#1696)
- Merged pull request #1735: fix(cisco): contain preflight scans to approved roots (#1735) Evidence for: Merged pull request #1735: fix(cisco): contain preflight scans to approved roots (#1735)
- Merged pull request #2417: fix(release): publish matching scanner versions Evidence for: Merged pull request #2417: fix(release): publish matching scanner versions
- Merged pull request #2022: docs(guard): record wave-five follow-on decision gates (#2022) Evidence for: Merged pull request #2022: docs(guard): record wave-five follow-on decision gates (#2022)
- Merged pull request #1862: fix(daemon): prevent duplicate keychain access (#1862) Evidence for: Merged pull request #1862: fix(daemon): prevent duplicate keychain access (#1862)
- Merged pull request #1700: feat(guard): observe launch identity drift (#1700) Evidence for: Merged pull request #1700: feat(guard): observe launch identity drift (#1700)
- Merged pull request #1900: feat(guard): ship 2.2 resilient runtime and command-aware protection Evidence for: Merged pull request #1900: feat(guard): ship 2.2 resilient runtime and command-aware protection
- Merged pull request #1793: feat(dashboard): add extension controls workspace Evidence for: Merged pull request #1793: feat(dashboard): add extension controls workspace
- Merged pull request #1765: chore(release): reconcile 2.1 with main Evidence for: Merged pull request #1765: chore(release): reconcile 2.1 with main
- Merged pull request #1726: fix(cursor): attest managed hook CLI identity Evidence for: Merged pull request #1726: fix(cursor): attest managed hook CLI identity
- Merged pull request #1989: docs(guard): add wave-zero threat-boundary matrix (#1989) Evidence for: Merged pull request #1989: docs(guard): add wave-zero threat-boundary matrix (#1989)
- Merged pull request #2002: feat(guard): add typed execution-assurance receipt (#2002) Evidence for: Merged pull request #2002: feat(guard): add typed execution-assurance receipt (#2002)
- Merged pull request #2075: fix(guard): restore Linux activation and harness UX (#2075) Evidence for: Merged pull request #2075: fix(guard): restore Linux activation and harness UX (#2075)
- Merged pull request #1858: fix(guard): recover command evidence health (#1858) Evidence for: Merged pull request #1858: fix(guard): recover command evidence health (#1858)
- Merged pull request #1671: feat(guard): add bounded command activity rollups (#1671) Evidence for: Merged pull request #1671: feat(guard): add bounded command activity rollups (#1671)
- Merged pull request #1708: fix(guard): authenticate dashboard reconnect after updates (#1708) Evidence for: Merged pull request #1708: fix(guard): authenticate dashboard reconnect after updates (#1708)
- Merged pull request #1753: fix(guard): compose compound command decisions Evidence for: Merged pull request #1753: fix(guard): compose compound command decisions
- Merged pull request #1711: fix(guard): preserve Claude hook argv exactly (#1711) Evidence for: Merged pull request #1711: fix(guard): preserve Claude hook argv exactly (#1711)
- Merged pull request #1985: docs(guard): record 2.1/2.2 compatibility evidence for release/3.1 (#1985) Evidence for: Merged pull request #1985: docs(guard): record 2.1/2.2 compatibility evidence for release/3.1 (#1985)
- Merged pull request #1879: fix(guard): close daemon resilience gaps (#1879) Evidence for: Merged pull request #1879: fix(guard): close daemon resilience gaps (#1879)
- Merged pull request #1658: feat(guard): define command activity contracts (#1658) Evidence for: Merged pull request #1658: feat(guard): define command activity contracts (#1658)
- Merged pull request #1732: fix(supply-chain): fail closed on incomplete lockfiles (#1732) Evidence for: Merged pull request #1732: fix(supply-chain): fail closed on incomplete lockfiles (#1732)
- Merged pull request #2068: fix(packaging): constrain baseline LiteLLM resolution (#2068) Evidence for: Merged pull request #2068: fix(packaging): constrain baseline LiteLLM resolution (#2068)
- Direct commit c7b3e77ce07e: test(packaging): refresh suite ratchet Evidence for: Direct commit c7b3e77ce07e: test(packaging): refresh suite ratchet
- Merged pull request #1983: style: apply ruff format to cloud exception requests (#1983) Evidence for: Merged pull request #1983: style: apply ruff format to cloud exception requests (#1983)
- Merged pull request #1662: feat(guard): persist command activity evidence (#1662) Evidence for: Merged pull request #1662: feat(guard): persist command activity evidence (#1662)
- Merged pull request #2028: feat(guard): add deny-by-default OCI runtime adapter (#2028) Evidence for: Merged pull request #2028: feat(guard): add deny-by-default OCI runtime adapter (#2028)
- Merged pull request #1737: feat(release): ship HOL Guard 2.1 Evidence for: Merged pull request #1737: feat(release): ship HOL Guard 2.1
- Merged pull request #2004: feat(guard): preserve benign DX with read-only command classifier (#2004) Evidence for: Merged pull request #2004: feat(guard): preserve benign DX with read-only command classifier (#2004)
- Merged pull request #1777: Merge consolidation history into release/2.1 Evidence for: Merged pull request #1777: Merge consolidation history into release/2.1
- Merged pull request #1647: feat(guard): define command effect contracts (#1647) Evidence for: Merged pull request #1647: feat(guard): define command effect contracts (#1647)
- Merged pull request #1717: fix(guard): backport trusted policy bundle signatures to 2.1 (#1717) Evidence for: Merged pull request #1717: fix(guard): backport trusted policy bundle signatures to 2.1 (#1717)
- Merged pull request #1859: fix(macos): keep keychain trust daemon-owned (#1859) Evidence for: Merged pull request #1859: fix(macos): keep keychain trust daemon-owned (#1859)
- Merged pull request #1697: feat(guard): add central effect evaluator (#1697) Evidence for: Merged pull request #1697: feat(guard): add central effect evaluator (#1697)
- Merged pull request #2027: feat(guard): add fail-closed Kubernetes RuntimeClass adapter (#2027) Evidence for: Merged pull request #2027: feat(guard): add fail-closed Kubernetes RuntimeClass adapter (#2027)
- Merged pull request #1764: fix(guard): harden authorization security gates (#1764) Evidence for: Merged pull request #1764: fix(guard): harden authorization security gates (#1764)
- Merged pull request #1881: fix(guard): harden daemon worker ownership (#1881) Evidence for: Merged pull request #1881: fix(guard): harden daemon worker ownership (#1881)
- Merged pull request #2420: fix(release): ignore dev canaries in alpha history Evidence for: Merged pull request #2420: fix(release): ignore dev canaries in alpha history
- Merged pull request #1774: fix(guard): defer incomplete runtime controls (#1774) Evidence for: Merged pull request #1774: fix(guard): defer incomplete runtime controls (#1774)
- Merged pull request #1863: fix(github): allow static pull request creation (#1863) Evidence for: Merged pull request #1863: fix(github): allow static pull request creation (#1863)
- Merged pull request #1673: feat(guard): add command activity APIs (#1673) Evidence for: Merged pull request #1673: feat(guard): add command activity APIs (#1673)
- Merged pull request #2074: fix(update): recover from delayed releases and broken pipx (#2074) Evidence for: Merged pull request #2074: fix(update): recover from delayed releases and broken pipx (#2074)
- Merged pull request #2037: fix(update): pass prerelease flag correctly to pipx (#2037) Evidence for: Merged pull request #2037: fix(update): pass prerelease flag correctly to pipx (#2037)
- Merged pull request #1870: feat(policy): add command pattern expressions (#1870) Evidence for: Merged pull request #1870: feat(policy): add command pattern expressions (#1870)
- Merged pull request #1869: fix(pi): bound hook fallback deadline (#1869) Evidence for: Merged pull request #1869: fix(pi): bound hook fallback deadline (#1869)
- Merged pull request #2010: test(guard): resolve bare python3 against system PATH in interpreter trust tests (#2010) Evidence for: Merged pull request #2010: test(guard): resolve bare python3 against system PATH in interpreter trust tests (#2010)
- Merged pull request #1771: Merge branch 'main' into release/2.2 Evidence for: Merged pull request #1771: Merge branch 'main' into release/2.2
- Merged pull request #1874: fix(github): allow verified canonical PR body files (#1874) Evidence for: Merged pull request #1874: fix(github): allow verified canonical PR body files (#1874)
- Merged pull request #1794: feat(controls): add managed policy resolver Evidence for: Merged pull request #1794: feat(controls): add managed policy resolver
- Merged pull request #1770: feat(guard): require one-use extension control proofs (#1770) Evidence for: Merged pull request #1770: feat(guard): require one-use extension control proofs (#1770)
- Merged pull request #1706: feat(guard): enforce GitHub capability floors (#1706) Evidence for: Merged pull request #1706: feat(guard): enforce GitHub capability floors (#1706)
- Merged pull request #1713: feat(guard): add execution-bound TypeScript containment Evidence for: Merged pull request #1713: feat(guard): add execution-bound TypeScript containment
- Merged pull request #1736: test(guard): add deterministic decision diff (#1736) Evidence for: Merged pull request #1736: test(guard): add deterministic decision diff (#1736)
- Merged pull request #1892: chore(release): forward-port reviewed main fixes (#1892) Evidence for: Merged pull request #1892: chore(release): forward-port reviewed main fixes (#1892)
- Merged pull request #1722: fix(guard): authenticate managed Codex hook identity Evidence for: Merged pull request #1722: fix(guard): authenticate managed Codex hook identity
- Merged pull request #1746: feat(guard): contain exact workspace writes (#1746) Evidence for: Merged pull request #1746: feat(guard): contain exact workspace writes (#1746)
- Merged pull request #2431: fix(release): checkout before prerelease verification Evidence for: Merged pull request #2431: fix(release): checkout before prerelease verification
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.1.0a10
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @deep-purple-boots
Implementation · 40 credits
- @kantorcodes
Implementation · 141 credits
Evidence ledger181 credits
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Verified commit author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Verified commit author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Verified commit author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @deep-purple-bootsSource for deep-purple-boots
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Verified commit author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Verified commit author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Verified commit author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author
- @kantorcodesSource for kantorcodes
Implementation · Pull request author