Documented changes
51 typed entries
Verified contributors
2 verified contributors · 51 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.43.0a3 is a preview release published 2026-10-11. Its comparison base is alpha/v3.43.0a1. It includes 51 verified contribution deliveries with public evidence links.
Changes
Other changes
51- Merged pull request #4108: feat(guard): move consumer artifact decision composition to the native runtime (#4108) Evidence for: Merged pull request #4108: feat(guard): move consumer artifact decision composition to the native runtime (#4108)
- Merged pull request #4156: refactor(guard): import package-script hashing from the contained-execution helpers (#4156) Evidence for: Merged pull request #4156: refactor(guard): import package-script hashing from the contained-execution helpers (#4156)
- Merged pull request #4045: fix(gauntlet): bind OMP raw reads to their resolved source (#4045) Evidence for: Merged pull request #4045: fix(gauntlet): bind OMP raw reads to their resolved source (#4045)
- Merged pull request #4122: ci(windows): build the packaged-gate runtime in its own cached job (#4122) Evidence for: Merged pull request #4122: ci(windows): build the packaged-gate runtime in its own cached job (#4122)
- Merged pull request #4124: fix(claude): time the hook from its own request, not the identity challenge (#4124) Evidence for: Merged pull request #4124: fix(claude): time the hook from its own request, not the identity challenge (#4124)
- Merged pull request #4138: refactor(guard): remove production-unreferenced runtime helpers (#4138) Evidence for: Merged pull request #4138: refactor(guard): remove production-unreferenced runtime helpers (#4138)
- Merged pull request #4123: feat(guard): port GitHub shell helpers, developer graph, index inspection and source edits to Rust (#4123) Evidence for: Merged pull request #4123: feat(guard): port GitHub shell helpers, developer graph, index inspection and source edits to Rust (#4123)
- Direct commit 69a6706a8b28: test(guard): align render fallback tests with the edge response path Evidence for: Direct commit 69a6706a8b28: test(guard): align render fallback tests with the edge response path
- Merged pull request #4134: fix(guard): allow file reads of Git HEAD and ref files in workspace repositories (#4134) Evidence for: Merged pull request #4134: fix(guard): allow file reads of Git HEAD and ref files in workspace repositories (#4134)
- Merged pull request #4133: chore(guard): scope the current Pi extension emitters with the other generated hook assets (#4133) Evidence for: Merged pull request #4133: chore(guard): scope the current Pi extension emitters with the other generated hook assets (#4133)
- Merged pull request #4120: fix(guard): keep Git read proofs stable in large repositories and on busy hosts (#4120) Evidence for: Merged pull request #4120: fix(guard): keep Git read proofs stable in large repositories and on busy hosts (#4120)
- Merged pull request #4112: fix(guard): prove read-only rg, fd and git -C across repositories below home (#4112) Evidence for: Merged pull request #4112: fix(guard): prove read-only rg, fd and git -C across repositories below home (#4112)
- Merged pull request #4083: feat(guard): move package audit projections to the native resident (#4083) Evidence for: Merged pull request #4083: feat(guard): move package audit projections to the native resident (#4083)
- Merged pull request #4150: ci(macos): build the identity-lane runtime in its own early job (#4150) Evidence for: Merged pull request #4150: ci(macos): build the identity-lane runtime in its own early job (#4150)
- Merged pull request #4128: chore(guard): scope the cloud command capability verifier with the command queue (#4128) Evidence for: Merged pull request #4128: chore(guard): scope the cloud command capability verifier with the command queue (#4128)
- Merged pull request #4141: ci: let the Sonar job reseed its Rust coverage cache (#4141) Evidence for: Merged pull request #4141: ci: let the Sonar job reseed its Rust coverage cache (#4141)
- Merged pull request #4127: feat(guard): derive and compose the effective native policy in Rust (#4127) Evidence for: Merged pull request #4127: feat(guard): derive and compose the effective native policy in Rust (#4127)
- Merged pull request #4094: fix(guard): keep Git read proofs when loader search paths point at trusted system directories (#4094) Evidence for: Merged pull request #4094: fix(guard): keep Git read proofs when loader search paths point at trusted system directories (#4094)
- Merged pull request #4143: fix(release): give release jobs their own GitHub App token and retry rate-limited API calls (#4143) Evidence for: Merged pull request #4143: fix(release): give release jobs their own GitHub App token and retry rate-limited API calls (#4143)
- Merged pull request #4126: fix(guard): treat a workspace in the macOS per-user temporary directory as a workspace (#4126) Evidence for: Merged pull request #4126: fix(guard): treat a workspace in the macOS per-user temporary directory as a workspace (#4126)
- Merged pull request #4144: fix(guard): keep Git read proofs when the loader search path names a home toolchain directory (#4144) Evidence for: Merged pull request #4144: fix(guard): keep Git read proofs when the loader search path names a home toolchain directory (#4144)
- Merged pull request #4105: refactor(guard): scope connect, init and OAuth lifecycle code out of the runtime majority (#4105) Evidence for: Merged pull request #4105: refactor(guard): scope connect, init and OAuth lifecycle code out of the runtime majority (#4105)
- Merged pull request #4131: fix(guard): refresh a superseded policy snapshot before failing a daemon hook (#4131) Evidence for: Merged pull request #4131: fix(guard): refresh a superseded policy snapshot before failing a daemon hook (#4131)
- Merged pull request #4080: refactor(guard): render hook responses natively and delete the Python renderers (#4080) Evidence for: Merged pull request #4080: refactor(guard): render hook responses natively and delete the Python renderers (#4080)
- Merged pull request #4125: feat(guard): send Codex thread continuations from the native resident (#4125) Evidence for: Merged pull request #4125: feat(guard): send Codex thread continuations from the native resident (#4125)
- Merged pull request #4058: fix(guard): recover the native runtime after it dies and fail hooks fast (#4058) Evidence for: Merged pull request #4058: fix(guard): recover the native runtime after it dies and fail hooks fast (#4058)
- Merged pull request #4152: perf(release): compile alpha native binaries in parallel with fast codegen (#4152) Evidence for: Merged pull request #4152: perf(release): compile alpha native binaries in parallel with fast codegen (#4152)
- Merged pull request #4115: fix(guard): daemon repair no longer fails when one lifecycle request lapses on a slow host (#4115) Evidence for: Merged pull request #4115: fix(guard): daemon repair no longer fails when one lifecycle request lapses on a slow host (#4115)
- Merged pull request #4081: feat(guard): port docker requests, jq filters and static shell safety to Rust (#4081) Evidence for: Merged pull request #4081: feat(guard): port docker requests, jq filters and static shell safety to Rust (#4081)
- Merged pull request #4109: ci(sonar): treat guard-runtime testdata scripts as test sources (#4109) Evidence for: Merged pull request #4109: ci(sonar): treat guard-runtime testdata scripts as test sources (#4109)
- Merged pull request #4136: perf(guard): keep the Claude hook bridge off the daemon manager and adapter imports (#4136) Evidence for: Merged pull request #4136: perf(guard): keep the Claude hook bridge off the daemon manager and adapter imports (#4136)
- Merged pull request #4153: refactor(guard): remove unreferenced runtime members and constants (#4153) Evidence for: Merged pull request #4153: refactor(guard): remove unreferenced runtime members and constants (#4153)
- Merged pull request #4034: ci: run the native, containment and installed-wheel proofs in a nightly workflow (#4034) Evidence for: Merged pull request #4034: ci: run the native, containment and installed-wheel proofs in a nightly workflow (#4034)
- Merged pull request #4114: test(guard-command): set library_search_paths in the textconv execution environment (#4114) Evidence for: Merged pull request #4114: test(guard-command): set library_search_paths in the textconv execution environment (#4114)
- Merged pull request #4117: fix(release): verify alpha Core sidecar wheels against the GitHub prerelease (#4117) Evidence for: Merged pull request #4117: fix(release): verify alpha Core sidecar wheels against the GitHub prerelease (#4117)
- Merged pull request #4111: refactor(guard): load effective Guard configuration in the native runtime (#4111) Evidence for: Merged pull request #4111: refactor(guard): load effective Guard configuration in the native runtime (#4111)
- Merged pull request #4130: chore(guard): scope the protection-health report out of the runtime closure (#4130) Evidence for: Merged pull request #4130: chore(guard): scope the protection-health report out of the runtime closure (#4130)
- Merged pull request #4132: chore(guard): scope the memory decision cloud outbox out of the runtime closure (#4132) Evidence for: Merged pull request #4132: chore(guard): scope the memory decision cloud outbox out of the runtime closure (#4132)
- Merged pull request #4106: fix(guard): keep a slow-starting daemon alive instead of terminating it (#4106) Evidence for: Merged pull request #4106: fix(guard): keep a slow-starting daemon alive instead of terminating it (#4106)
- Merged pull request #4158: test(contained-runner): create executable vector fixtures owner-only (#4158) Evidence for: Merged pull request #4158: test(contained-runner): create executable vector fixtures owner-only (#4158)
- Merged pull request #4119: ci: retire workflows folded into nightly native (#4119) Evidence for: Merged pull request #4119: ci: retire workflows folded into nightly native (#4119)
- Direct commit 9fb8fd38d951: feat(guard): derive and compose the effective native policy in Rust Evidence for: Direct commit 9fb8fd38d951: feat(guard): derive and compose the effective native policy in Rust
- Merged pull request #4116: ci: reuse compiled objects for the macOS and Windows runtime builds (#4116) Evidence for: Merged pull request #4116: ci: reuse compiled objects for the macOS and Windows runtime builds (#4116)
- Merged pull request #4078: feat(guard): port the contained node, TypeScript and Bun script runners to the resident (#4078) Evidence for: Merged pull request #4078: feat(guard): port the contained node, TypeScript and Bun script runners to the resident (#4078)
- Merged pull request #4113: feat(guard): move signed Claude/Cursor hook authority state to the native resident (#4113) Evidence for: Merged pull request #4113: feat(guard): move signed Claude/Cursor hook authority state to the native resident (#4113)
- Merged pull request #4142: refactor(guard): remove the unused Codex foreign hook group pruner (#4142) Evidence for: Merged pull request #4142: refactor(guard): remove the unused Codex foreign hook group pruner (#4142)
- Merged pull request #4101: feat(guard): acquire restricted archives in the native resident (#4101) Evidence for: Merged pull request #4101: feat(guard): acquire restricted archives in the native resident (#4101)
- Merged pull request #4135: refactor(guard): classify environment-secret reads in native request context (#4135) Evidence for: Merged pull request #4135: refactor(guard): classify environment-secret reads in native request context (#4135)
- Merged pull request #4139: fix(guard): accept Promise.all reads and console.log output in Oh My Pi eval (#4139) Evidence for: Merged pull request #4139: fix(guard): accept Promise.all reads and console.log output in Oh My Pi eval (#4139)
- Merged pull request #4137: feat(guard): move direct-tool context authority into the native resident (#4137) Evidence for: Merged pull request #4137: feat(guard): move direct-tool context authority into the native resident (#4137)
- Merged pull request #4118: fix(update): install the native alpha wheel from the GitHub prerelease (#4118) Evidence for: Merged pull request #4118: fix(update): install the native alpha wheel from the GitHub prerelease (#4118)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.43.0a1
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @internet-dot
Implementation · 2 credits
- @zerocodefast
Implementation · 49 credits
Evidence ledger51 credits
- @internet-dotSource for internet-dot
Implementation · Verified commit author
- @internet-dotSource for internet-dot
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Verified commit author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author