Documented changes
35 typed entries
Verified contributors
2 verified contributors · 13 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.43.0a6 is a preview release published 2026-10-12. Upstream documents: Guard 3.43.0a6 is an opt-in prerelease cut from [`084de22`](https://github.com/hashgraph-online/hol-guard/commit/084de22a1f9f6f6566f9752ec7c77616eaf9b63c). Stable installations remain on the stable channel. **12 commits • 10 merged pull requests • 2 contributors** since [Guard 3.43.0a5](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a5). Its comparison base is alpha/v3.43.0a5. It includes 13 verified contribution deliveries with public evidence links.
Changes
Added
4- **guard**: Build hook approval-context tokens in the native runtime ([#4223](https://github.com/hashgraph-online/hol-guard/pull/4223)) Evidence for: **guard**: Build hook approval-context tokens in the native runtime ([#4223](https://github.com/hashgraph-online/hol-guard/pull/4223))
- Two new resident `context_digest` kinds, `runtime_hook_approval_context` and `generic_hook_approval_context`, compose the full five-component approval-context token in Rust (`hook_approval_context.rs`): path… Evidence for: Two new resident `context_digest` kinds, `runtime_hook_approval_context` and `generic_hook_approval_context`, compose the full five-component approval-context token in Rust (`hook_approval_context.rs`): path…
- `_runtime_hook_approval_context_token` and `_generic_hook_approval_context_token` are now thin wrappers. They project Python objects into JSON request fields through `native_hook_approval_context.py` and return the… Evidence for: `_runtime_hook_approval_context_token` and `_generic_hook_approval_context_token` are now thin wrappers. They project Python objects into JSON request fields through `native_hook_approval_context.py` and return the…
- Deleted the Python builders: `_runtime_hook_action_capabilities`, `_runtime_hook_permission_mode`, `_runtime_hook_evidence_payload`, `_runtime_hook_executable_identity`, `_normalized_runtime_context_path`… Evidence for: Deleted the Python builders: `_runtime_hook_action_capabilities`, `_runtime_hook_permission_mode`, `_runtime_hook_evidence_payload`, `_runtime_hook_executable_identity`, `_normalized_runtime_context_path`…
Improved
3- **guard**: Derive GitHub workflow bindings in the native resident ([#4217](https://github.com/hashgraph-online/hol-guard/pull/4217)) Evidence for: **guard**: Derive GitHub workflow bindings in the native resident ([#4217](https://github.com/hashgraph-online/hol-guard/pull/4217))
- Plan custom extension continuity in the native runtime ([#4212](https://github.com/hashgraph-online/hol-guard/pull/4212)) Evidence for: Plan custom extension continuity in the native runtime ([#4212](https://github.com/hashgraph-online/hol-guard/pull/4212))
- **guard**: Move content sensitivity and structured mediation to Rust ([#4227](https://github.com/hashgraph-online/hol-guard/pull/4227)) Evidence for: **guard**: Move content sensitivity and structured mediation to Rust ([#4227](https://github.com/hashgraph-online/hol-guard/pull/4227))
Fixed
8- **guard**: Expand named-user skill rules, widen aibom deadlines, back off MCP enrichment ([#4230](https://github.com/hashgraph-online/hol-guard/pull/4230)) Evidence for: **guard**: Expand named-user skill rules, widen aibom deadlines, back off MCP enrichment ([#4230](https://github.com/hashgraph-online/hol-guard/pull/4230))
- `config.toml` skill rules that name `~user` now resolve to that user's home on Unix, matching the retired Python `expanduser`; unknown users and Windows still leave the path literal. Evidence for: `config.toml` skill rules that name `~user` now resolve to that user's home on Unix, matching the retired Python `expanduser`; unknown users and Windows still leave the path literal.
- Workspace discovery kinds (`aibom_workspace_artifacts`, `aibom_workspace_plan`, `aibom_codex_skills`) run under an 8s resident deadline instead of the 5s launch budget, still bounded by the envelope cap. Evidence for: Workspace discovery kinds (`aibom_workspace_artifacts`, `aibom_workspace_plan`, `aibom_codex_skills`) run under an 8s resident deadline instead of the 5s launch budget, still bounded by the envelope cap.
- A resident outage during MCP metadata enrichment now backs off for 30s, so the remaining servers fall back to unbound digests immediately instead of each waiting out the deadline. Evidence for: A resident outage during MCP metadata enrichment now backs off for 30s, so the remaining servers fall back to unbound digests immediately instead of each waiting out the deadline.
- **guard**: Let enabled GitHub permissions cover GraphQL mutations and @mentions ([#4202](https://github.com/hashgraph-online/hol-guard/pull/4202)) Evidence for: **guard**: Let enabled GitHub permissions cover GraphQL mutations and @mentions ([#4202](https://github.com/hashgraph-online/hol-guard/pull/4202))
- `gh api graphql` mutations (resolve a review thread, add a comment) were classified as unknown with uncertainty. The command-permission allow is never applied while uncertainty is present, so enabling the permission… Evidence for: `gh api graphql` mutations (resolve a review thread, add a comment) were classified as unknown with uncertainty. The command-permission allow is never applied while uncertainty is present, so enabling the permission…
- A reply body that mentioned a user (`-f body='@reviewer Fixed in abc123'`) was treated as a file read and rejected. With `gh`, `-f`/`--raw-field` values are always literal strings. Evidence for: A reply body that mentioned a user (`-f body='@reviewer Fixed in abc123'`) was treated as a file read and rejected. With `gh`, `-f`/`--raw-field` values are always literal strings.
- Review-thread resolution was only recognized in its literal form. The common variable form (`mutation($id: ID!) { resolveReviewThread(input: {threadId: $id}) ... }` with `-f id=PRRT_...`) and comma-separated selections… Evidence for: Review-thread resolution was only recognized in its literal form. The common variable form (`mutation($id: ID!) { resolveReviewThread(input: {threadId: $id}) ... }` with `-f id=PRRT_...`) and comma-separated selections…
Other changes
20- Documented change: Guard 3.43.0a6 is an opt-in prerelease cut from [`084de22`](https://github.com/hashgraph-online/hol-guard/commit/084de22a1f9f6f6566f9752ec7c77616eaf9b63c). Stable installations remain on the stable channel. **12 commits • 10 merged pull requests • 2 contributors** since [Guard 3.43.0a5](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a5). Evidence for: Documented change: Guard 3.43.0a6 is an opt-in prerelease cut from [`084de22`](https://github.com/hashgraph-online/hol-guard/commit/084de22a1f9f6f6566f9752ec7c77616eaf9b63c). Stable installations remain on the stable channel. **12 commits • 10 merged pull requests • 2 contributors** since [Guard 3.43.0a5](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a5).
- **guard**: One resident store call for MCP tool-call evidence ([`e9814d7`](https://github.com/hashgraph-online/hol-guard/commit/e9814d78ea81b24fe0c343b03d7fa5621d9bc452)) Evidence for: **guard**: One resident store call for MCP tool-call evidence ([`e9814d7`](https://github.com/hashgraph-online/hol-guard/commit/e9814d78ea81b24fe0c343b03d7fa5621d9bc452))
- **guard**: Cut per-hook CPU on the pi PostToolUse path ([#4225](https://github.com/hashgraph-online/hol-guard/pull/4225)) Evidence for: **guard**: Cut per-hook CPU on the pi PostToolUse path ([#4225](https://github.com/hashgraph-online/hol-guard/pull/4225))
- **guard**: Discover the native runtime once per hook request ([#4224](https://github.com/hashgraph-online/hol-guard/pull/4224)) Evidence for: **guard**: Discover the native runtime once per hook request ([#4224](https://github.com/hashgraph-online/hol-guard/pull/4224))
- **guard**: Read saved MCP tool policy inside the resident decide op ([#4211](https://github.com/hashgraph-online/hol-guard/pull/4211)) Evidence for: **guard**: Read saved MCP tool policy inside the resident decide op ([#4211](https://github.com/hashgraph-online/hol-guard/pull/4211))
- **gauntlet**: Fail ordinary work on any interruption and replay real hook payloads on every PR ([`60309a7`](https://github.com/hashgraph-online/hol-guard/commit/60309a77d1390d063ffd179cb3b94591d074462c)) Evidence for: **gauntlet**: Fail ordinary work on any interruption and replay real hook payloads on every PR ([`60309a7`](https://github.com/hashgraph-online/hol-guard/commit/60309a77d1390d063ffd179cb3b94591d074462c))
- Move rich command model authority into the resident runtime ([#4228](https://github.com/hashgraph-online/hol-guard/pull/4228)) Evidence for: Move rich command model authority into the resident runtime ([#4228](https://github.com/hashgraph-online/hol-guard/pull/4228))
- Merged pull request #4227: refactor(guard): move content sensitivity and structured mediation to Rust (#4227) Evidence for: Merged pull request #4227: refactor(guard): move content sensitivity and structured mediation to Rust (#4227)
- Merged pull request #4217: refactor(guard): derive GitHub workflow bindings in the native resident (#4217) Evidence for: Merged pull request #4217: refactor(guard): derive GitHub workflow bindings in the native resident (#4217)
- Merged pull request #4212: refactor: plan custom extension continuity in the native runtime (#4212) Evidence for: Merged pull request #4212: refactor: plan custom extension continuity in the native runtime (#4212)
- Merged pull request #4225: perf(guard): skip the unused invocation-preview round trip for command-less hook records (#4225) Evidence for: Merged pull request #4225: perf(guard): skip the unused invocation-preview round trip for command-less hook records (#4225)
- Merged pull request #4230: fix(guard): expand named-user skill rules, widen aibom deadlines, back off MCP enrichment (#4230) Evidence for: Merged pull request #4230: fix(guard): expand named-user skill rules, widen aibom deadlines, back off MCP enrichment (#4230)
- Merged pull request #4090: ci(gauntlet): fail ordinary work on any interruption and replay real hook payloads on every PR Evidence for: Merged pull request #4090: ci(gauntlet): fail ordinary work on any interruption and replay real hook payloads on every PR
- Direct commit 52bf6132cb2c: perf(guard): write MCP tool-call inventory, receipt and event in one resident store call Evidence for: Direct commit 52bf6132cb2c: perf(guard): write MCP tool-call inventory, receipt and event in one resident store call
- Merged pull request #4223: feat(guard): build hook approval-context tokens in the native runtime (#4223) Evidence for: Merged pull request #4223: feat(guard): build hook approval-context tokens in the native runtime (#4223)
- Merged pull request #4202: fix(guard): let enabled GitHub permissions cover GraphQL mutations and @mentions (#4202) Evidence for: Merged pull request #4202: fix(guard): let enabled GitHub permissions cover GraphQL mutations and @mentions (#4202)
- Merged pull request #4195: perf(guard): one resident store call for MCP tool-call evidence Evidence for: Merged pull request #4195: perf(guard): one resident store call for MCP tool-call evidence
- Merged pull request #4228: Move rich command model authority into the resident runtime (#4228) Evidence for: Merged pull request #4228: Move rich command model authority into the resident runtime (#4228)
- Merged pull request #4211: perf(guard): read saved MCP tool policy inside the resident decide op (#4211) Evidence for: Merged pull request #4211: perf(guard): read saved MCP tool policy inside the resident decide op (#4211)
- Merged pull request #4224: perf(guard): discover the native runtime once per hook request (#4224) Evidence for: Merged pull request #4224: perf(guard): discover the native runtime once per hook request (#4224)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.43.0a5
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @internet-dot
Implementation · 1 credit
- @zerocodefast
Implementation · 12 credits
Evidence ledger13 credits
- @internet-dotSource for internet-dot
Implementation · Verified commit author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author