Documented changes
39 typed entries
Verified contributors
Credits being verified. Attribution coverage is in progress.
Attribution coverage
attribution in progress; history inventory partial.
Install
Scope
Guard v3.44.0a4 is a preview release published 2026-10-13. Upstream documents: Guard 3.44.0a4 is an opt-in prerelease cut from [`c1ca078`](https://github.com/hashgraph-online/hol-guard/commit/c1ca0787ee1d4acdf4cc823a76f9666f2cb0d8a4). Stable installations remain on the stable channel. **14 commits • 14 merged pull requests • 1 contributor** since [Guard 3.44.0a3](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a3). Its comparison base is alpha/v3.44.0a3. It includes 14 verified contribution deliveries with public evidence links. Attribution for this release is being ver
Changes
Added
9- **guard**: Route Claude Code sandbox requirements from the resident ([#4363](https://github.com/hashgraph-online/hol-guard/pull/4363)) Evidence for: **guard**: Route Claude Code sandbox requirements from the resident ([#4363](https://github.com/hashgraph-online/hol-guard/pull/4363))
- The daemon binds the sink command prefix (`contained_sink_command`) in the direct-lane binding, but only for a resident that advertises `hook-direct-contained-route-v1`. Older residents never see the field, so… Evidence for: The daemon binds the sink command prefix (`contained_sink_command`) in the direct-lane binding, but only for a resident that advertises `hook-direct-contained-route-v1`. Older residents never see the field, so…
- The resident checks the same conditions as the Python router: harness, Watch, receipt-only flag, decision, policy action, profile per platform, shell tool and string command. It then writes the request snapshot into a… Evidence for: The resident checks the same conditions as the Python router: harness, Watch, receipt-only flag, decision, policy action, profile per platform, shell tool and string command. It then writes the request snapshot into a…
- The resident reclaims stale snapshots after a day, as the daemon does. It opens the directory with `O_NOFOLLOW` and checks owner, modes, link count and age before unlinking. Evidence for: The resident reclaims stale snapshots after a day, as the daemon does. It opens the directory with `O_NOFOLLOW` and checks owner, modes, link count and age before unlinking.
- **guard**: Answer PreToolUse hooks under custom extension rules when no local CLI launches ([#4355](https://github.com/hashgraph-online/hol-guard/pull/4355)) Evidence for: **guard**: Answer PreToolUse hooks under custom extension rules when no local CLI launches ([#4355](https://github.com/hashgraph-online/hol-guard/pull/4355))
- **guard**: Answer Watch PreToolUse hooks from the resident ([#4354](https://github.com/hashgraph-online/hol-guard/pull/4354)) Evidence for: **guard**: Answer Watch PreToolUse hooks from the resident ([#4354](https://github.com/hashgraph-online/hol-guard/pull/4354))
- custom extension block rules (the daemon checks the local CLI grant), Evidence for: custom extension block rules (the daemon checks the local CLI grant),
- transition probes and any state the published snapshot does not settle. Evidence for: transition probes and any state the published snapshot does not settle.
- **guard**: Answer terminal PreToolUse blocks from the resident ([#4349](https://github.com/hashgraph-online/hol-guard/pull/4349)) Evidence for: **guard**: Answer terminal PreToolUse blocks from the resident ([#4349](https://github.com/hashgraph-online/hol-guard/pull/4349))
Fixed
15- **guard**: Stop false blocks on routine git, listing and web-fetch work in agent sessions ([#4357](https://github.com/hashgraph-online/hol-guard/pull/4357)) Evidence for: **guard**: Stop false blocks on routine git, listing and web-fetch work in agent sessions ([#4357](https://github.com/hashgraph-online/hol-guard/pull/4357))
- **guard**: Let script-free npm installs continue on npm releases before 11.9 ([#4365](https://github.com/hashgraph-online/hol-guard/pull/4365)) Evidence for: **guard**: Let script-free npm installs continue on npm releases before 11.9 ([#4365](https://github.com/hashgraph-online/hol-guard/pull/4365))
- **guard**: Keep the git push proof when the session trusts a company CA bundle ([#4364](https://github.com/hashgraph-online/hol-guard/pull/4364)) Evidence for: **guard**: Keep the git push proof when the session trusts a company CA bundle ([#4364](https://github.com/hashgraph-online/hol-guard/pull/4364))
- **gauntlet**: Count a full task's failed contained command as Guard's only when the sandbox refused it ([#4361](https://github.com/hashgraph-online/hol-guard/pull/4361)) Evidence for: **gauntlet**: Count a full task's failed contained command as Guard's only when the sandbox refused it ([#4361](https://github.com/hashgraph-online/hol-guard/pull/4361))
- its output shows a sandbox refusal (`Operation not permitted`, `Permission denied`, `Read-only file system`, `EPERM`/`EACCES`/`EROFS`, or a name-resolution or unreachable-network error); Evidence for: its output shows a sandbox refusal (`Operation not permitted`, `Permission denied`, `Read-only file system`, `EPERM`/`EACCES`/`EROFS`, or a name-resolution or unreachable-network error);
- the reviewed command runs `curl` and exits 6 or 7, curl's silent network failures; or Evidence for: the reviewed command runs `curl` and exits 6 or 7, curl's silent network failures; or
- **guard**: Keep npm read and install proofs when the session trusts an extra CA ([#4359](https://github.com/hashgraph-online/hol-guard/pull/4359)) Evidence for: **guard**: Keep npm read and install proofs when the session trusts an extra CA ([#4359](https://github.com/hashgraph-online/hol-guard/pull/4359))
- **guard**: Let agents create a private GitHub repository without review ([#4360](https://github.com/hashgraph-online/hol-guard/pull/4360)) Evidence for: **guard**: Let agents create a private GitHub repository without review ([#4360](https://github.com/hashgraph-online/hol-guard/pull/4360))
- **guard**: Prove git worktree add for sibling paths and ordinary Git sessions ([#4358](https://github.com/hashgraph-online/hol-guard/pull/4358)) Evidence for: **guard**: Prove git worktree add for sibling paths and ordinary Git sessions ([#4358](https://github.com/hashgraph-online/hol-guard/pull/4358))
- **guard**: Point agents at a private repository when gh repo create needs review ([#4352](https://github.com/hashgraph-online/hol-guard/pull/4352)) Evidence for: **guard**: Point agents at a private repository when gh repo create needs review ([#4352](https://github.com/hashgraph-online/hol-guard/pull/4352))
- **guard**: Give content sensitivity checks time to start the native resident ([#4348](https://github.com/hashgraph-online/hol-guard/pull/4348)) Evidence for: **guard**: Give content sensitivity checks time to start the native resident ([#4348](https://github.com/hashgraph-online/hol-guard/pull/4348))
- 0.5 seconds for a round trip to a resident that is already running Evidence for: 0.5 seconds for a round trip to a resident that is already running
- 4 seconds when the resident has to be started first Evidence for: 4 seconds when the resident has to be started first
- 30 seconds for large bodies, as before Evidence for: 30 seconds for large bodies, as before
- **guard**: Keep Git commands that write repository metadata out of the workspace sandbox ([#4345](https://github.com/hashgraph-online/hol-guard/pull/4345)) Evidence for: **guard**: Keep Git commands that write repository metadata out of the workspace sandbox ([#4345](https://github.com/hashgraph-online/hol-guard/pull/4345))
Other changes
15- Documented change: Guard 3.44.0a4 is an opt-in prerelease cut from [`c1ca078`](https://github.com/hashgraph-online/hol-guard/commit/c1ca0787ee1d4acdf4cc823a76f9666f2cb0d8a4). Stable installations remain on the stable channel. **14 commits • 14 merged pull requests • 1 contributor** since [Guard 3.44.0a3](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a3). Evidence for: Documented change: Guard 3.44.0a4 is an opt-in prerelease cut from [`c1ca078`](https://github.com/hashgraph-online/hol-guard/commit/c1ca0787ee1d4acdf4cc823a76f9666f2cb0d8a4). Stable installations remain on the stable channel. **14 commits • 14 merged pull requests • 1 contributor** since [Guard 3.44.0a3](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a3).
- Merged pull request #4357: fix(guard): stop false blocks on routine git, listing and web-fetch work in agent sessions (#4357) Evidence for: Merged pull request #4357: fix(guard): stop false blocks on routine git, listing and web-fetch work in agent sessions (#4357)
- Merged pull request #4355: feat(guard): answer PreToolUse hooks under custom extension rules when no local CLI launches (#4355) Evidence for: Merged pull request #4355: feat(guard): answer PreToolUse hooks under custom extension rules when no local CLI launches (#4355)
- Merged pull request #4349: feat(guard): answer terminal PreToolUse blocks from the resident (#4349) Evidence for: Merged pull request #4349: feat(guard): answer terminal PreToolUse blocks from the resident (#4349)
- Merged pull request #4345: fix(guard): keep Git commands that write repository metadata out of the workspace sandbox (#4345) Evidence for: Merged pull request #4345: fix(guard): keep Git commands that write repository metadata out of the workspace sandbox (#4345)
- Merged pull request #4361: fix(gauntlet): count a full task's failed contained command as Guard's only when the sandbox refused it (#4361) Evidence for: Merged pull request #4361: fix(gauntlet): count a full task's failed contained command as Guard's only when the sandbox refused it (#4361)
- Merged pull request #4360: fix(guard): let agents create a private GitHub repository without review (#4360) Evidence for: Merged pull request #4360: fix(guard): let agents create a private GitHub repository without review (#4360)
- Merged pull request #4365: fix(guard): let script-free npm installs continue on npm releases before 11.9 (#4365) Evidence for: Merged pull request #4365: fix(guard): let script-free npm installs continue on npm releases before 11.9 (#4365)
- Merged pull request #4363: feat(guard): route Claude Code sandbox requirements from the resident (#4363) Evidence for: Merged pull request #4363: feat(guard): route Claude Code sandbox requirements from the resident (#4363)
- Merged pull request #4354: feat(guard): answer Watch PreToolUse hooks from the resident (#4354) Evidence for: Merged pull request #4354: feat(guard): answer Watch PreToolUse hooks from the resident (#4354)
- Merged pull request #4352: fix(guard): point agents at a private repository when gh repo create needs review (#4352) Evidence for: Merged pull request #4352: fix(guard): point agents at a private repository when gh repo create needs review (#4352)
- Merged pull request #4348: fix(guard): give content sensitivity checks time to start the native resident (#4348) Evidence for: Merged pull request #4348: fix(guard): give content sensitivity checks time to start the native resident (#4348)
- Merged pull request #4359: fix(guard): keep npm read and install proofs when the session trusts an extra CA (#4359) Evidence for: Merged pull request #4359: fix(guard): keep npm read and install proofs when the session trusts an extra CA (#4359)
- Merged pull request #4358: fix(guard): prove git worktree add for sibling paths and ordinary Git sessions (#4358) Evidence for: Merged pull request #4358: fix(guard): prove git worktree add for sibling paths and ordinary Git sessions (#4358)
- Merged pull request #4364: fix(guard): keep the git push proof when the session trusts a company CA bundle (#4364) Evidence for: Merged pull request #4364: fix(guard): keep the git push proof when the session trusts a company CA bundle (#4364)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.44.0a3
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @zerocodefast
Implementation · 14 credits
Evidence ledger14 credits
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author