Release notes

HOL Guard v3.44.0a1

Preview

Published October 12, 2026Original GitHub release for alpha/v3.44.0a1

Documented changes

102 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.44.0a1 is a preview release published 2026-10-12. Upstream documents: Guard 3.44.0a1 is an opt-in prerelease cut from [`a82b426`](https://github.com/hashgraph-online/hol-guard/commit/a82b4260dcb8c3f5c20535b0ed531a5968fc2d40). Stable installations remain on the stable channel. **34 commits • 33 merged pull requests • 3 contributors** since [Guard 3.43.1](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.43.1). Its comparison base is alpha/v3.43.0a8. It includes 62 verified contribution deliveries with public evidence links. Attribution for this release is being verified.

Changes

Added28
Fixed11
Other changes63

Added

28

**guard**: Run the Codex hook bridge in the native runtime ([#4307](https://github.com/hashgraph-online/hol-guard/pull/4307)) Evidence for: **guard**: Run the Codex hook bridge in the native runtime ([#4307](https://github.com/hashgraph-online/hol-guard/pull/4307))
`hol-guard-runtime codex-hook-bridge -I ` authenticates the daemon with the signed identity challenge, checks the auth token against the signed state, posts the hook on one loopback… Evidence for: `hol-guard-runtime codex-hook-bridge -I ` authenticates the daemon with the signed identity challenge, checks the auth token against the signed state, posts the hook on one loopback…
Anything else is handed to the existing Python bridge: recovery, daemon restarts, approval waits, a non-200 answer or any unexpected failure. The native bridge never retries or decides a verdict on its own. When it… Evidence for: Anything else is handed to the existing Python bridge: recovery, daemon restarts, approval waits, a non-200 answer or any unexpected failure. The native bridge never retries or decides a verdict on its own. When it…
Once a request has been sent, a delegation reaches the Python bridge through `--native-handoff`, which renders the daemon's answer without sending the request again. A delegation before the request goes out reruns the… Evidence for: Once a request has been sent, a delegation reaches the Python bridge through `--native-handoff`, which renders the daemon's answer without sending the request again. A delegation before the request goes out reruns the…
**guard**: Let agents create a private GitHub repository without a prompt ([#4308](https://github.com/hashgraph-online/hol-guard/pull/4308)) Evidence for: **guard**: Let agents create a private GitHub repository without a prompt ([#4308](https://github.com/hashgraph-online/hol-guard/pull/4308))
`gh repo create NAME --private` Evidence for: `gh repo create NAME --private`
plus any of `--source=.`, `--remote NAME`, `--description TEXT`, `--gitignore NAME`, `--license NAME`, `--add-readme`, `--disable-issues`, `--disable-wiki` Evidence for: plus any of `--source=.`, `--remote NAME`, `--description TEXT`, `--gitignore NAME`, `--license NAME`, `--add-readme`, `--disable-issues`, `--disable-wiki`
**guard**: Ship the source compiler inside the native runtime ([#4306](https://github.com/hashgraph-online/hol-guard/pull/4306)) Evidence for: **guard**: Ship the source compiler inside the native runtime ([#4306](https://github.com/hashgraph-online/hol-guard/pull/4306))
**Rust:** the compiler CLI moved verbatim into `guard_command::source_cli` (`is_command` and `main`). The runtime dispatches to it first, before its panic hook, and only for the exact compiler argument shapes… Evidence for: **Rust:** the compiler CLI moved verbatim into `guard_command::source_cli` (`is_command` and `main`). The runtime dispatches to it first, before its panic hook, and only for the exact compiler argument shapes…
**Wheel assembly:** `build_native_hol_guard_wheel.py` no longer takes `--source-compiler`. The `--implementation-digest` and `--base-program-digest` arguments stay, and the builder writes… Evidence for: **Wheel assembly:** `build_native_hol_guard_wheel.py` no longer takes `--source-compiler`. The `--implementation-digest` and `--base-program-digest` arguments stay, and the builder writes…
**Python:** `native_source_compiler` accepts only the v2 manifest, requires `executable` to be the runtime, and verifies the runtime bytes. The rest is unchanged: runtime-manifest equality, base-program and… Evidence for: **Python:** `native_source_compiler` accepts only the v2 manifest, requires `executable` to be the runtime, and verifies the runtime bytes. The rest is unchanged: runtime-manifest equality, base-program and…
**guard**: Answer sensitive-request classifiers in the native resident ([#4300](https://github.com/hashgraph-online/hol-guard/pull/4300)) Evidence for: **guard**: Answer sensitive-request classifiers in the native resident ([#4300](https://github.com/hashgraph-online/hol-guard/pull/4300))
New `sensitive_request` request-context action. It covers tool actions, file reads (direct and from an action envelope), file writes, command-list candidate texts, benign file reads, benign tool actions and read-only… Evidence for: New `sensitive_request` request-context action. It covers tool actions, file reads (direct and from an action envelope), file writes, command-list candidate texts, benign file reads, benign tool actions and read-only…
Python sends the tool call plus its own observations (cwd, home, environment, git executable, extension-control snapshot). It never sends a verdict. Evidence for: Python sends the tool call plus its own observations (cwd, home, environment, git executable, extension-control snapshot). It never sends a verdict.
A caller's canonical command is reparsed by the resident with the caller's dialect, transport and provenance, and binds only when the resident's security identity matches. Otherwise the request fails with… Evidence for: A caller's canonical command is reparsed by the resident with the caller's dialect, transport and provenance, and binds only when the resident's security identity matches. Otherwise the request fails with…
**guard**: Run the Claude hook bridge in the native runtime ([#4305](https://github.com/hashgraph-online/hol-guard/pull/4305)) Evidence for: **guard**: Run the Claude hook bridge in the native runtime ([#4305](https://github.com/hashgraph-online/hol-guard/pull/4305))
proves the daemon's identity with a signed challenge on one loopback connection, then posts the hook with the proof, all inside the hook deadline Evidence for: proves the daemon's identity with a signed challenge on one loopback connection, then posts the hook with the proof, all inside the hook deadline
refuses non-loopback fallback URLs and daemon state that does not match the hook's Guard home Evidence for: refuses non-loopback fallback URLs and daemon state that does not match the hook's Guard home
recovers a dead daemon once with the same isolated start command the Python bridge uses Evidence for: recovers a dead daemon once with the same isolated start command the Python bridge uses
**guard**: Build memory pattern fingerprints in the native runtime ([#4291](https://github.com/hashgraph-online/hol-guard/pull/4291)) Evidence for: **guard**: Build memory pattern fingerprints in the native runtime ([#4291](https://github.com/hashgraph-online/hol-guard/pull/4291))
the decision fingerprint (package install, MCP tool, file read, shell command, or generic artifact pattern) Evidence for: the decision fingerprint (package install, MCP tool, file read, shell command, or generic artifact pattern)
the shell-domain exact-command ids (`memory:exact-shell-command:` / `memory:exact-command:`) Evidence for: the shell-domain exact-command ids (`memory:exact-shell-command:` / `memory:exact-command:`)
the `memory: : : ` id that policy lookup probes after the direct artifact Evidence for: the `memory: : : ` id that policy lookup probes after the direct artifact
**runtime**: Prepare contained execution plans in Rust ([#4280](https://github.com/hashgraph-online/hol-guard/pull/4280)) Evidence for: **runtime**: Prepare contained execution plans in Rust ([#4280](https://github.com/hashgraph-online/hol-guard/pull/4280))
Prepare contained Node, Vitest, Python unittest and inline execution plans in Rust, including credential-filtered sandbox profiles, Linux ELF mapping evidence and process headroom. Evidence for: Prepare contained Node, Vitest, Python unittest and inline execution plans in Rust, including credential-filtered sandbox profiles, Linux ELF mapping evidence and process headroom.
Retire 574 net counted runtime Python source lines across nine existing modules. Python retains plan transport and process orchestration. Evidence for: Retire 574 net counted runtime Python source lines across nine existing modules. Python retains plan transport and process orchestration.
Preserve Node test scripts, local tsx loaders, caller-HOME nvm installations and stderr merging. Mapping snapshots enforce the aggregate deadline and use owner-only, digest-bound handoffs within the existing IPC limit. Evidence for: Preserve Node test scripts, local tsx loaders, caller-HOME nvm installations and stderr merging. Mapping snapshots enforce the aggregate deadline and use owner-only, digest-bound handoffs within the existing IPC limit.
Move portable policy compilation and YAML admission to Rust ([#4239](https://github.com/hashgraph-online/hol-guard/pull/4239)) Evidence for: Move portable policy compilation and YAML admission to Rust ([#4239](https://github.com/hashgraph-online/hol-guard/pull/4239))

Fixed

11

**release**: Optimize Windows alpha workspace code ([`a82b426`](https://github.com/hashgraph-online/hol-guard/commit/a82b4260dcb8c3f5c20535b0ed531a5968fc2d40)) Evidence for: **release**: Optimize Windows alpha workspace code ([`a82b426`](https://github.com/hashgraph-online/hol-guard/commit/a82b4260dcb8c3f5c20535b0ed531a5968fc2d40))
**guard**: Let names-only listings of skill directories and missing paths proceed ([#4298](https://github.com/hashgraph-online/hol-guard/pull/4298)) Evidence for: **guard**: Let names-only listings of skill directories and missing paths proceed ([#4298](https://github.com/hashgraph-online/hol-guard/pull/4298))
**guard**: Model command, time and env prefixes on ordinary programs ([#4293](https://github.com/hashgraph-online/hol-guard/pull/4293)) Evidence for: **guard**: Model command, time and env prefixes on ordinary programs ([#4293](https://github.com/hashgraph-online/hol-guard/pull/4293))
**guard**: Accept Windows home spellings in Oh My Pi agent-root listings ([#4296](https://github.com/hashgraph-online/hol-guard/pull/4296)) Evidence for: **guard**: Accept Windows home spellings in Oh My Pi agent-root listings ([#4296](https://github.com/hashgraph-online/hol-guard/pull/4296))
**guard**: Prove workspace symlinks and plain file removals natively ([#4297](https://github.com/hashgraph-online/hol-guard/pull/4297)) Evidence for: **guard**: Prove workspace symlinks and plain file removals natively ([#4297](https://github.com/hashgraph-online/hol-guard/pull/4297))
`ln -s SOURCE LINK` (and `ln -s -- SOURCE LINK`) proceeds when: Evidence for: `ln -s SOURCE LINK` (and `ln -s -- SOURCE LINK`) proceeds when:
the source is an absolute or `~/` path that passes the bounded read screen (directories allowed), and is not the home directory, the workspace, or an ancestor of either; Evidence for: the source is an absolute or `~/` path that passes the bounded read screen (directories allowed), and is not the home directory, the workspace, or an ancestor of either;
the link path does not exist yet and sits in the workspace or a linked worktree of the same repository, outside hidden, sensitive and autostart locations. Evidence for: the link path does not exist yet and sits in the workspace or a linked worktree of the same repository, outside hidden, sensitive and autostart locations.
**guard**: Stop hard-blocking commands that set an environment variable ([#4294](https://github.com/hashgraph-online/hol-guard/pull/4294)) Evidence for: **guard**: Stop hard-blocking commands that set an environment variable ([#4294](https://github.com/hashgraph-online/hol-guard/pull/4294))
**guard**: Let agents read their own plan notes and evidence ([#4295](https://github.com/hashgraph-online/hol-guard/pull/4295)) Evidence for: **guard**: Let agents read their own plan notes and evidence ([#4295](https://github.com/hashgraph-online/hol-guard/pull/4295))
**guard**: Let constant bun -e prints run when no Bun preload can load ([#4286](https://github.com/hashgraph-online/hol-guard/pull/4286)) Evidence for: **guard**: Let constant bun -e prints run when no Bun preload can load ([#4286](https://github.com/hashgraph-online/hol-guard/pull/4286))

Other changes

63

Documented change: Guard 3.44.0a1 is an opt-in prerelease cut from [`a82b426`](https://github.com/hashgraph-online/hol-guard/commit/a82b4260dcb8c3f5c20535b0ed531a5968fc2d40). Stable installations remain on the stable channel. **34 commits • 33 merged pull requests • 3 contributors** since [Guard 3.43.1](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.43.1). Evidence for: Documented change: Guard 3.44.0a1 is an opt-in prerelease cut from [`a82b426`](https://github.com/hashgraph-online/hol-guard/commit/a82b4260dcb8c3f5c20535b0ed531a5968fc2d40). Stable installations remain on the stable channel. **34 commits • 33 merged pull requests • 3 contributors** since [Guard 3.43.1](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.43.1).
Merged pull request #4273: fix(release): raise native wheel size budgets so 3.43 can publish (#4273) Evidence for: Merged pull request #4273: fix(release): raise native wheel size budgets so 3.43 can publish (#4273)
Merged pull request #4260: fix(guard): let du, df, diff and git config reads run without review (#4260) Evidence for: Merged pull request #4260: fix(guard): let du, df, diff and git config reads run without review (#4260)
Merged pull request #4287: fix(gauntlet): list required commands as plain lines in the agent prompt (#4287) Evidence for: Merged pull request #4287: fix(gauntlet): list required commands as plain lines in the agent prompt (#4287)
Merged pull request #4300: feat(guard): answer sensitive-request classifiers in the native resident (#4300) Evidence for: Merged pull request #4300: feat(guard): answer sensitive-request classifiers in the native resident (#4300)
Merged pull request #4307: feat(guard): run the Codex hook bridge in the native runtime (#4307) Evidence for: Merged pull request #4307: feat(guard): run the Codex hook bridge in the native runtime (#4307)
Merged pull request #2943: [extension] command.ai-dev: ai-dev command safety extension (#2943) Evidence for: Merged pull request #2943: [extension] command.ai-dev: ai-dev command safety extension (#2943)
Merged pull request #4296: fix(guard): accept Windows home spellings in Oh My Pi agent-root listings (#4296) Evidence for: Merged pull request #4296: fix(guard): accept Windows home spellings in Oh My Pi agent-root listings (#4296)
Merged pull request #4274: chore(release): 3.43.1 (#4274) Evidence for: Merged pull request #4274: chore(release): 3.43.1 (#4274)
Merged pull request #4266: fix(gauntlet): stop exporting a Unix loader path in the Windows realistic environment (#4266) Evidence for: Merged pull request #4266: fix(gauntlet): stop exporting a Unix loader path in the Windows realistic environment (#4266)
Merged pull request #4285: fix(guard): let pushes of the checked-out branch to a GitHub origin proceed natively (#4285) Evidence for: Merged pull request #4285: fix(guard): let pushes of the checked-out branch to a GitHub origin proceed natively (#4285)
Merged pull request #4254: feat(guard): fold the configured policy action into the native policy_stack query (#4254) Evidence for: Merged pull request #4254: feat(guard): fold the configured policy action into the native policy_stack query (#4254)
Merged pull request #4264: feat(guard): native Codex harness detection at exact Python parity (#4264) Evidence for: Merged pull request #4264: feat(guard): native Codex harness detection at exact Python parity (#4264)
Merged pull request #3963: chore(release): 3.43.0 (#3963) Evidence for: Merged pull request #3963: chore(release): 3.43.0 (#3963)
Direct commit 5e5d031b6b0f: Merge branch 'main' into feat/command-ai-dev-extension Evidence for: Direct commit 5e5d031b6b0f: Merge branch 'main' into feat/command-ai-dev-extension
Merged pull request #4298: fix(guard): let names-only listings of skill directories and missing paths proceed (#4298) Evidence for: Merged pull request #4298: fix(guard): let names-only listings of skill directories and missing paths proceed (#4298)
Direct commit 8f05da286873: fix(guard): keep non-finite package-shim manifest fields Evidence for: Direct commit 8f05da286873: fix(guard): keep non-finite package-shim manifest fields
Merged pull request #4308: feat(guard): let agents create a private GitHub repository without a prompt (#4308) Evidence for: Merged pull request #4308: feat(guard): let agents create a private GitHub repository without a prompt (#4308)
Merged pull request #4309: refactor(guard): stop loading the Python sensitive-request classifiers (#4309) Evidence for: Merged pull request #4309: refactor(guard): stop loading the Python sensitive-request classifiers (#4309)
Merged pull request #4290: refactor(guard): classify GitHub shell requests in Rust (#4290) Evidence for: Merged pull request #4290: refactor(guard): classify GitHub shell requests in Rust (#4290)
Merged pull request #4306: feat(guard): ship the source compiler inside the native runtime (#4306) Evidence for: Merged pull request #4306: feat(guard): ship the source compiler inside the native runtime (#4306)
Merged pull request #4268: fix(guard): contain test-named TypeScript and JavaScript scripts (#4268) Evidence for: Merged pull request #4268: fix(guard): contain test-named TypeScript and JavaScript scripts (#4268)
Merged pull request #4301: build(release): leave Rust integration tests and fixtures out of the sdist (#4301) Evidence for: Merged pull request #4301: build(release): leave Rust integration tests and fixtures out of the sdist (#4301)
Merged pull request #4258: fix(cli): drop an always-true workspace check in Copilot root resolution (#4258) Evidence for: Merged pull request #4258: fix(cli): drop an always-true workspace check in Copilot root resolution (#4258)
Merged pull request #4279: test(gauntlet): add git, registry, index-url and lockfile-integrity supply-chain block cases (#4279) Evidence for: Merged pull request #4279: test(gauntlet): add git, registry, index-url and lockfile-integrity supply-chain block cases (#4279)
Merged pull request #4263: fix(guard): allow names-only listings of the Oh My Pi agent root (#4263) Evidence for: Merged pull request #4263: fix(guard): allow names-only listings of the Oh My Pi agent root (#4263)
Merged pull request #4239: feat: move portable policy compilation and YAML admission to Rust (#4239) Evidence for: Merged pull request #4239: feat: move portable policy compilation and YAML admission to Rust (#4239)
Merged pull request #4292: test(gauntlet): run full developer tasks end to end and list what would stop them (#4292) Evidence for: Merged pull request #4292: test(gauntlet): run full developer tasks end to end and list what would stop them (#4292)
Merged pull request #4280: feat(runtime): prepare contained execution plans in Rust (#4280) Evidence for: Merged pull request #4280: feat(runtime): prepare contained execution plans in Rust (#4280)
Merged pull request #4289: fix(guard): accept the guard prefix in contained runs on the Desktop launcher (#4289) Evidence for: Merged pull request #4289: fix(guard): accept the guard prefix in contained runs on the Desktop launcher (#4289)
Merged pull request #4262: fix(guard): contain builds and tests run after cd into a sibling repository (#4262) Evidence for: Merged pull request #4262: fix(guard): contain builds and tests run after cd into a sibling repository (#4262)
Merged pull request #4243: fix(guard): reuse the native review binding when queueing a review (#4243) Evidence for: Merged pull request #4243: fix(guard): reuse the native review binding when queueing a review (#4243)
Merged pull request #4278: fix(guard): prove cd ~/ prefixes and relative node_modules entrypoints (#4278) Evidence for: Merged pull request #4278: fix(guard): prove cd ~/ prefixes and relative node_modules entrypoints (#4278)
Merged pull request #4271: test(gauntlet): add offline supply-chain install cases (#4271) Evidence for: Merged pull request #4271: test(gauntlet): add offline supply-chain install cases (#4271)
Merged pull request #4297: fix(guard): prove workspace symlinks and plain file removals natively (#4297) Evidence for: Merged pull request #4297: fix(guard): prove workspace symlinks and plain file removals natively (#4297)
Merged pull request #4187: refactor(guard): move Codex binding capture to the native runtime (#4187) Evidence for: Merged pull request #4187: refactor(guard): move Codex binding capture to the native runtime (#4187)
Merged pull request #4275: fix(guard): treat Unix loader search paths as inert for Windows Git proofs (#4275) Evidence for: Merged pull request #4275: fix(guard): treat Unix loader search paths as inert for Windows Git proofs (#4275)
Merged pull request #4293: fix(guard): model command, time and env prefixes on ordinary programs (#4293) Evidence for: Merged pull request #4293: fix(guard): model command, time and env prefixes on ordinary programs (#4293)
Merged pull request #4281: fix(guard): let command lookups, Guard help, merge-base and chained Git reads proceed (#4281) Evidence for: Merged pull request #4281: fix(guard): let command lookups, Guard help, merge-base and chained Git reads proceed (#4281)
Direct commit f639f132414d: Merge remote-tracking branch 'origin/main' into w3604 Evidence for: Direct commit f639f132414d: Merge remote-tracking branch 'origin/main' into w3604
Merged pull request #4312: fix(release): optimize Windows alpha workspace code Evidence for: Merged pull request #4312: fix(release): optimize Windows alpha workspace code
Merged pull request #4270: fix(gauntlet): ask for each listed command as its own Bash call (#4270) Evidence for: Merged pull request #4270: fix(gauntlet): ask for each listed command as its own Bash call (#4270)
Merged pull request #4269: fix(guard): let bounded staged diffs use the ordinary git read proof (#4269) Evidence for: Merged pull request #4269: fix(guard): let bounded staged diffs use the ordinary git read proof (#4269)
Merged pull request #4256: refactor(continuation): move finalization and evidence authority into Rust (#4256) Evidence for: Merged pull request #4256: refactor(continuation): move finalization and evidence authority into Rust (#4256)
Merged pull request #4233: feat(guard): native Hermes harness detection at exact Python parity (#4233) Evidence for: Merged pull request #4233: feat(guard): native Hermes harness detection at exact Python parity (#4233)
Merged pull request #4291: feat(guard): build memory pattern fingerprints in the native runtime (#4291) Evidence for: Merged pull request #4291: feat(guard): build memory pattern fingerprints in the native runtime (#4291)
Merged pull request #4255: fix(guard): let agent-home listings, sibling-repo grep and mktemp scratch dirs proceed (#4255) Evidence for: Merged pull request #4255: fix(guard): let agent-home listings, sibling-repo grep and mktemp scratch dirs proceed (#4255)
Merged pull request #4253: refactor(guard): native record_audit subop for the package-shim manifest (#4253) Evidence for: Merged pull request #4253: refactor(guard): native record_audit subop for the package-shim manifest (#4253)
Direct commit 9eb44445e933: maintainer: merge main; normalize non-contribution paths to main Evidence for: Direct commit 9eb44445e933: maintainer: merge main; normalize non-contribution paths to main
Direct commit a755c6859eaa: test(guard): keep recorded override facts typed and unconfigured data-flow vectors unconfigured Evidence for: Direct commit a755c6859eaa: test(guard): keep recorded override facts typed and unconfigured data-flow vectors unconfigured
Merged pull request #4294: fix(guard): stop hard-blocking commands that set an environment variable (#4294) Evidence for: Merged pull request #4294: fix(guard): stop hard-blocking commands that set an environment variable (#4294)
Merged pull request #4286: fix(guard): let constant bun -e prints run when no Bun preload can load (#4286) Evidence for: Merged pull request #4286: fix(guard): let constant bun -e prints run when no Bun preload can load (#4286)
Merged pull request #4246: feat(guard): port the sensitive tool-action dispatcher to Rust (#4246) Evidence for: Merged pull request #4246: feat(guard): port the sensitive tool-action dispatcher to Rust (#4246)
Merged pull request #4265: fix(guard): keep non-finite package-shim manifest fields (#4265) Evidence for: Merged pull request #4265: fix(guard): keep non-finite package-shim manifest fields (#4265)
Merged pull request #4267: fix(gauntlet): accept OMP contained-test runs in core cases only when fully bound (#4267) Evidence for: Merged pull request #4267: fix(gauntlet): accept OMP contained-test runs in core cases only when fully bound (#4267)
Merged pull request #3604: fix(ci): stage external contribution trust before native builds (#3604) Evidence for: Merged pull request #3604: fix(ci): stage external contribution trust before native builds (#3604)
Merged pull request #4303: test(guard): run every portable command-source fixture in PR CI (#4303) Evidence for: Merged pull request #4303: test(guard): run every portable command-source fixture in PR CI (#4303)
Merged pull request #4236: refactor(guard): move decision authority into the native runtime (#4236) Evidence for: Merged pull request #4236: refactor(guard): move decision authority into the native runtime (#4236)
Merged pull request #4257: refactor(guard): drop the unused shim_admin_native bridge (#4257) Evidence for: Merged pull request #4257: refactor(guard): drop the unused shim_admin_native bridge (#4257)
Merged pull request #4295: fix(guard): let agents read their own plan notes and evidence (#4295) Evidence for: Merged pull request #4295: fix(guard): let agents read their own plan notes and evidence (#4295)
Merged pull request #4272: fix(guard): review PostToolUse results after a contained test supersedes the policy snapshot (#4272) Evidence for: Merged pull request #4272: fix(guard): review PostToolUse results after a contained test supersedes the policy snapshot (#4272)
Merged pull request #4305: feat(guard): run the Claude hook bridge in the native runtime (#4305) Evidence for: Merged pull request #4305: feat(guard): run the Claude hook bridge in the native runtime (#4305)
Merged pull request #4277: fix(guard): run `python -m unittest` and status-echo test commands in the read-only sandbox (#4277) Evidence for: Merged pull request #4277: fix(guard): run `python -m unittest` and status-echo test commands in the read-only sandbox (#4277)

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.43.0a8

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

@d4rkNinja
Implementation · 1 credit
@internet-dot
Implementation · 2 credits
@kantorcodes
Implementation · 1 credit
@MatthiasLew
Implementation · 1 credit
@zerocodefast
Implementation · 57 credits

Evidence ledger62 credits

@d4rkNinja
Implementation · Pull request author
Source for d4rkNinja
@internet-dot
Implementation · Verified commit author
Source for internet-dot
@internet-dot
Implementation · Pull request author
Source for internet-dot
@kantorcodes
Implementation · Verified commit author
Source for kantorcodes
@MatthiasLew
Implementation · Pull request author
Source for MatthiasLew
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Verified commit author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Verified commit author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Verified commit author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast