Documented changes
40 typed entries
Verified contributors
Credits being verified. Attribution coverage is in progress.
Attribution coverage
attribution in progress; history inventory partial.
Install
Scope
Guard v3.43.0a8 is a preview release published 2026-10-12. Upstream documents: Guard 3.43.0a8 is an opt-in prerelease cut from [`4136e0a`](https://github.com/hashgraph-online/hol-guard/commit/4136e0ac62febc7a89404f2e680099949e8cdce7). Stable installations remain on the stable channel. **15 commits • 14 merged pull requests • 2 contributors** since [Guard 3.43.0a7](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a7). Its comparison base is alpha/v3.43.0a7. It includes 15 verified contribution deliveries with public evidence links. Attribution for this release is being ve
Changes
Added
13- **guard**: Route package-shim admin through the resident shim_admin op ([#4215](https://github.com/hashgraph-online/hol-guard/pull/4215)) Evidence for: **guard**: Route package-shim admin through the resident shim_admin op ([#4215](https://github.com/hashgraph-online/hol-guard/pull/4215))
- New thin transport `native_shim_admin.py` keeps the original helper signatures; it gathers ambient facts, sends one request, and strictly decodes the envelope. Evidence for: New thin transport `native_shim_admin.py` keeps the original helper signatures; it gathers ambient facts, sends one request, and strictly decodes the envelope.
- The Python implementations and their native fallbacks are removed from `shims.py`, `package_shim_status.py`, `shim_probe.py`, `shell_profile_cleanup.py`, `command_executors.py` and `local_supply_chain.py`. Evidence for: The Python implementations and their native fallbacks are removed from `shims.py`, `package_shim_status.py`, `shim_probe.py`, `shell_profile_cleanup.py`, `command_executors.py` and `local_supply_chain.py`.
- If the resident is unavailable the helpers raise a typed error (a `RuntimeError` subclass) and fail closed; Python never recomputes results. Evidence for: If the resident is unavailable the helpers raise a typed error (a `RuntimeError` subclass) and fail closed; Python never recomputes results.
- **guard**: Port ZCode harness detection to the native runtime ([#4218](https://github.com/hashgraph-online/hol-guard/pull/4218)) Evidence for: **guard**: Port ZCode harness detection to the native runtime ([#4218](https://github.com/hashgraph-online/hol-guard/pull/4218))
- Rust: `zcode_detect.rs`, `zcode_artifacts.rs`, and a Python-compatible JSON parser (`pyjson.rs`) so truthiness, float rendering, code-point ordering and the `.zcode-plugin/plugin.json` discovery match the old behaviour. Evidence for: Rust: `zcode_detect.rs`, `zcode_artifacts.rs`, and a Python-compatible JSON parser (`pyjson.rs`) so truthiness, float rendering, code-point ordering and the `.zcode-plugin/plugin.json` discovery match the old behaviour.
- Parity vectors (66 cases) were recorded from the old Python implementation before cutover (`testdata/zcode/record_zcode_vectors.py`) and are replayed by a Rust test. The oracle was mutation-checked (float truthiness… Evidence for: Parity vectors (66 cases) were recorded from the old Python implementation before cutover (`testdata/zcode/record_zcode_vectors.py`) and are replayed by a Rust test. The oracle was mutation-checked (float truthiness…
- Python: `ZCodeHarnessAdapter.detect` is now a thin facade over `native_adapter_detection("zcode_detect", ...)`; it keeps only the runtime signal, command availability and the workspace AIBOM extension.… Evidence for: Python: `ZCodeHarnessAdapter.detect` is now a thin facade over `native_adapter_detection("zcode_detect", ...)`; it keeps only the runtime signal, command availability and the workspace AIBOM extension.…
- **runtime**: Native skill-directory identity on all platforms ([`e3807d9`](https://github.com/hashgraph-online/hol-guard/commit/e3807d944094262e706664544fa976c3c50aa1e8)) Evidence for: **runtime**: Native skill-directory identity on all platforms ([`e3807d9`](https://github.com/hashgraph-online/hol-guard/commit/e3807d944094262e706664544fa976c3c50aa1e8))
- **guard**: Move package execution context build to the native resident ([#4231](https://github.com/hashgraph-online/hol-guard/pull/4231)) Evidence for: **guard**: Move package execution context build to the native resident ([#4231](https://github.com/hashgraph-online/hol-guard/pull/4231))
- New wire contract in `guard-contracts` (`guard-package-context-build-request.v1` / `-result.v1`, feature `package-context-build-v1`, 512 KiB request cap). Evidence for: New wire contract in `guard-contracts` (`guard-package-context-build-request.v1` / `-result.v1`, feature `package-context-build-v1`, 512 KiB request cap).
- New builder in `guard-command` (`package_context_build/`), generic over a `Ports` seam so the parity replay can compare every native hook call. Evidence for: New builder in `guard-command` (`package_context_build/`), generic over a `Ports` seam so the parity replay can compare every native hook call.
- New resident op `guard-runtime/src/package_context_build_op.rs`, wired in `resident_ops.rs`, `resident_protocol.rs`, `resident_op_features.rs`, and a 60 s client ceiling in `managed_resident.rs`. Evidence for: New resident op `guard-runtime/src/package_context_build_op.rs`, wired in `resident_ops.rs`, `resident_protocol.rs`, `resident_op_features.rs`, and a 60 s client ceiling in `managed_resident.rs`.
Improved
3- **guard**: Decide Claude approval-question answers in the native runtime ([#4240](https://github.com/hashgraph-online/hol-guard/pull/4240)) Evidence for: **guard**: Decide Claude approval-question answers in the native runtime ([#4240](https://github.com/hashgraph-online/hol-guard/pull/4240))
- **guard**: Project consumer artifact evidence and results in the resident ([#4241](https://github.com/hashgraph-online/hol-guard/pull/4241)) Evidence for: **guard**: Project consumer artifact evidence and results in the resident ([#4241](https://github.com/hashgraph-online/hol-guard/pull/4241))
- **guard**: Validate context-digest results in the native resident ([#4244](https://github.com/hashgraph-online/hol-guard/pull/4244)) Evidence for: **guard**: Validate context-digest results in the native resident ([#4244](https://github.com/hashgraph-online/hol-guard/pull/4244))
Fixed
2- **omp**: Let ordinary skill, artifact, scratch and raw reads complete ([#4017](https://github.com/hashgraph-online/hol-guard/pull/4017)) Evidence for: **omp**: Let ordinary skill, artifact, scratch and raw reads complete ([#4017](https://github.com/hashgraph-online/hol-guard/pull/4017))
- **guard**: Keep the policy-floor warning silent on proven-safe tool output ([#4251](https://github.com/hashgraph-online/hol-guard/pull/4251)) Evidence for: **guard**: Keep the policy-floor warning silent on proven-safe tool output ([#4251](https://github.com/hashgraph-online/hol-guard/pull/4251))
Other changes
22- Documented change: Guard 3.43.0a8 is an opt-in prerelease cut from [`4136e0a`](https://github.com/hashgraph-online/hol-guard/commit/4136e0ac62febc7a89404f2e680099949e8cdce7). Stable installations remain on the stable channel. **15 commits • 14 merged pull requests • 2 contributors** since [Guard 3.43.0a7](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a7). Evidence for: Documented change: Guard 3.43.0a8 is an opt-in prerelease cut from [`4136e0a`](https://github.com/hashgraph-online/hol-guard/commit/4136e0ac62febc7a89404f2e680099949e8cdce7). Stable installations remain on the stable channel. **15 commits • 14 merged pull requests • 2 contributors** since [Guard 3.43.0a7](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.43.0a7).
- **gauntlet**: Build qualification wheels with a fast development profile ([#4252](https://github.com/hashgraph-online/hol-guard/pull/4252)) Evidence for: **gauntlet**: Build qualification wheels with a fast development profile ([#4252](https://github.com/hashgraph-online/hol-guard/pull/4252))
- **guard**: Build the warm MCP tools/call identity in one resident call ([#4247](https://github.com/hashgraph-online/hol-guard/pull/4247)) Evidence for: **guard**: Build the warm MCP tools/call identity in one resident call ([#4247](https://github.com/hashgraph-online/hol-guard/pull/4247))
- **guard**: Fuse the MCP tools/call quiet edge, write and response into one resident exchange ([#4206](https://github.com/hashgraph-online/hol-guard/pull/4206)) Evidence for: **guard**: Fuse the MCP tools/call quiet edge, write and response into one resident exchange ([#4206](https://github.com/hashgraph-online/hol-guard/pull/4206))
- **guard**: Warm the native store before timing the contended writer stop ([#4248](https://github.com/hashgraph-online/hol-guard/pull/4248)) Evidence for: **guard**: Warm the native store before timing the contended writer stop ([#4248](https://github.com/hashgraph-online/hol-guard/pull/4248))
- Clear new-code Sonar reliability and security findings in tests ([#4249](https://github.com/hashgraph-online/hol-guard/pull/4249)) Evidence for: Clear new-code Sonar reliability and security findings in tests ([#4249](https://github.com/hashgraph-online/hol-guard/pull/4249))
- Raise native wheel size budgets for the Rust runtime ([#4242](https://github.com/hashgraph-online/hol-guard/pull/4242)) Evidence for: Raise native wheel size budgets for the Rust runtime ([#4242](https://github.com/hashgraph-online/hol-guard/pull/4242))
- Merged pull request #4215: feat(guard): route package-shim admin through the resident shim_admin op (#4215) Evidence for: Merged pull request #4215: feat(guard): route package-shim admin through the resident shim_admin op (#4215)
- Merged pull request #4248: test(guard): warm the native store before timing the contended writer stop (#4248) Evidence for: Merged pull request #4248: test(guard): warm the native store before timing the contended writer stop (#4248)
- Merged pull request #4017: fix(omp): let ordinary skill, artifact, scratch and raw reads complete (#4017) Evidence for: Merged pull request #4017: fix(omp): let ordinary skill, artifact, scratch and raw reads complete (#4017)
- Merged pull request #4231: feat(guard): move package execution context build to the native resident (#4231) Evidence for: Merged pull request #4231: feat(guard): move package execution context build to the native resident (#4231)
- Merged pull request #4247: perf(guard): build the warm MCP tools/call identity in one resident call (#4247) Evidence for: Merged pull request #4247: perf(guard): build the warm MCP tools/call identity in one resident call (#4247)
- Merged pull request #4251: fix(guard): keep the policy-floor warning silent on proven-safe tool output (#4251) Evidence for: Merged pull request #4251: fix(guard): keep the policy-floor warning silent on proven-safe tool output (#4251)
- Merged pull request #4206: perf(guard): fuse the MCP tools/call quiet edge, write and response into one resident exchange (#4206) Evidence for: Merged pull request #4206: perf(guard): fuse the MCP tools/call quiet edge, write and response into one resident exchange (#4206)
- Merged pull request #4252: perf(gauntlet): build qualification wheels with a fast development profile (#4252) Evidence for: Merged pull request #4252: perf(gauntlet): build qualification wheels with a fast development profile (#4252)
- Merged pull request #4218: feat(guard): port ZCode harness detection to the native runtime (#4218) Evidence for: Merged pull request #4218: feat(guard): port ZCode harness detection to the native runtime (#4218)
- Merged pull request #4240: refactor(guard): decide Claude approval-question answers in the native runtime (#4240) Evidence for: Merged pull request #4240: refactor(guard): decide Claude approval-question answers in the native runtime (#4240)
- Merged pull request #4242: ci: raise native wheel size budgets for the Rust runtime (#4242) Evidence for: Merged pull request #4242: ci: raise native wheel size budgets for the Rust runtime (#4242)
- Merged pull request #4249: test: clear new-code Sonar reliability and security findings in tests (#4249) Evidence for: Merged pull request #4249: test: clear new-code Sonar reliability and security findings in tests (#4249)
- Merged pull request #4244: refactor(guard): validate context-digest results in the native resident (#4244) Evidence for: Merged pull request #4244: refactor(guard): validate context-digest results in the native resident (#4244)
- Merged pull request #4221: feat(runtime): native skill-directory identity on all platforms Evidence for: Merged pull request #4221: feat(runtime): native skill-directory identity on all platforms
- Merged pull request #4241: refactor(guard): project consumer artifact evidence and results in the resident (#4241) Evidence for: Merged pull request #4241: refactor(guard): project consumer artifact evidence and results in the resident (#4241)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.43.0a7
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @zerocodefast
Implementation · 15 credits
Evidence ledger15 credits
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author