Documented changes
18 typed entries
Verified contributors
1 verified contributor · 4 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.44.0a5 is a preview release published 2026-10-13. Upstream documents: Guard 3.44.0a5 is an opt-in prerelease cut from [`4b8d8a0`](https://github.com/hashgraph-online/hol-guard/commit/4b8d8a0e5410e89a150c20c55afa3b2afc19f63e). Stable installations remain on the stable channel. **4 commits • 4 merged pull requests • 1 contributor** since [Guard 3.44.0a4](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a4). Its comparison base is alpha/v3.44.0a4. It includes 4 verified contribution deliveries with public evidence links.
Changes
Added
8- **guard**: Answer Cursor terminal denials from the resident ([#4369](https://github.com/hashgraph-online/hol-guard/pull/4369)) Evidence for: **guard**: Answer Cursor terminal denials from the resident ([#4369](https://github.com/hashgraph-online/hol-guard/pull/4369))
- **Resident pass-through.** For a Cursor `PreToolUse`, the resident now returns the edge result when the daemon would return it unchanged: an allow rendered as allow or warn, a terminal block rendered as a block (except… Evidence for: **Resident pass-through.** For a Cursor `PreToolUse`, the resident now returns the edge result when the daemon would return it unchanged: an allow rendered as allow or warn, a terminal block rendered as a block (except…
- **Bridge rendering.** `cursor-hook-bridge` reproduces `_emit_cursor_response` for these answers: the same reason lookup order and default, the `beforeReadFile` shape without `agent_message`, `json.dumps` separators… Evidence for: **Bridge rendering.** `cursor-hook-bridge` reproduces `_emit_cursor_response` for these answers: the same reason lookup order and default, the `beforeReadFile` shape without `agent_message`, `json.dumps` separators…
- **Deferral.** A response with a review link, a lone surrogate, a non-text policy action or any other shape the bridge can't reproduce byte for byte is left to the Python client. Evidence for: **Deferral.** A response with a review link, a lone surrogate, a non-text policy action or any other shape the bridge can't reproduce byte for byte is left to the Python client.
- **guard**: Answer allowed Cursor hooks from the resident ([#4368](https://github.com/hashgraph-online/hol-guard/pull/4368)) Evidence for: **guard**: Answer allowed Cursor hooks from the resident ([#4368](https://github.com/hashgraph-online/hol-guard/pull/4368))
- Installed command: `guard-runtime cursor-hook-bridge -I --cursor-hook-event `. Evidence for: Installed command: `guard-runtime cursor-hook-bridge -I --cursor-hook-event `.
- For `preToolUse`, `beforeShellExecution`, `beforeMCPExecution` and `beforeReadFile`, the runtime reproduces the client's steps up to its daemon request: reading the hook, preparing the payload, picking the workspace… Evidence for: For `preToolUse`, `beforeShellExecution`, `beforeMCPExecution` and `beforeReadFile`, the runtime reproduces the client's steps up to its daemon request: reading the hook, preparing the payload, picking the workspace…
- Every other case runs the generated Python client unchanged: `after*` hooks, `beforeSubmitPrompt`, `stop`, any other verdict, no resident, or input the runtime cannot reproduce byte-for-byte. The client gets the hook… Evidence for: Every other case runs the generated Python client unchanged: `after*` hooks, `beforeSubmitPrompt`, `stop`, any other verdict, no resident, or input the runtime cannot reproduce byte-for-byte. The client gets the hook…
Fixed
5- **guard**: Admit empty work-tree markers and read prefixes before cd ([#4370](https://github.com/hashgraph-online/hol-guard/pull/4370)) Evidence for: **guard**: Admit empty work-tree markers and read prefixes before cd ([#4370](https://github.com/hashgraph-online/hol-guard/pull/4370))
- **guard**: Contain linked worktree runs with the shared Git directory writable ([#4367](https://github.com/hashgraph-online/hol-guard/pull/4367)) Evidence for: **guard**: Contain linked worktree runs with the shared Git directory writable ([#4367](https://github.com/hashgraph-online/hol-guard/pull/4367))
- **Detection:** a linked worktree is recognized only when its `.git` gitfile, the admin entry's `commondir` and its `gitdir` backlink agree, and neither the worktree nor the shared directory holds the other. Anything… Evidence for: **Detection:** a linked worktree is recognized only when its `.git` gitfile, the admin entry's `commondir` and its `gitdir` backlink agree, and neither the worktree nor the shared directory holds the other. Anything…
- **macOS:** the seatbelt profile lets the run read and execute from the main checkout and write below the shared `objects`, `refs` and `logs`, `packed-refs`, and the entry's own index/HEAD/reflog/merge-state files. The… Evidence for: **macOS:** the seatbelt profile lets the run read and execute from the main checkout and write below the shared `objects`, `refs` and `logs`, `packed-refs`, and the entry's own index/HEAD/reflog/merge-state files. The…
- **Linux:** the main checkout is bind-mounted read-only and its `.git` gets a second overlay. Changes there are accepted only inside those same stores and admin files; both overlays are validated before either is applied. Evidence for: **Linux:** the main checkout is bind-mounted read-only and its `.git` gets a second overlay. Changes there are accepted only inside those same stores and admin files; both overlays are validated before either is applied.
Other changes
5- Documented change: Guard 3.44.0a5 is an opt-in prerelease cut from [`4b8d8a0`](https://github.com/hashgraph-online/hol-guard/commit/4b8d8a0e5410e89a150c20c55afa3b2afc19f63e). Stable installations remain on the stable channel. **4 commits • 4 merged pull requests • 1 contributor** since [Guard 3.44.0a4](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a4). Evidence for: Documented change: Guard 3.44.0a5 is an opt-in prerelease cut from [`4b8d8a0`](https://github.com/hashgraph-online/hol-guard/commit/4b8d8a0e5410e89a150c20c55afa3b2afc19f63e). Stable installations remain on the stable channel. **4 commits • 4 merged pull requests • 1 contributor** since [Guard 3.44.0a4](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a4).
- Merged pull request #4368: feat(guard): answer allowed Cursor hooks from the resident (#4368) Evidence for: Merged pull request #4368: feat(guard): answer allowed Cursor hooks from the resident (#4368)
- Merged pull request #4367: fix(guard): contain linked worktree runs with the shared Git directory writable (#4367) Evidence for: Merged pull request #4367: fix(guard): contain linked worktree runs with the shared Git directory writable (#4367)
- Merged pull request #4369: feat(guard): answer Cursor terminal denials from the resident (#4369) Evidence for: Merged pull request #4369: feat(guard): answer Cursor terminal denials from the resident (#4369)
- Merged pull request #4370: fix(guard): admit empty work-tree markers and read prefixes before cd (#4370) Evidence for: Merged pull request #4370: fix(guard): admit empty work-tree markers and read prefixes before cd (#4370)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.44.0a4
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @zerocodefast
Implementation · 4 credits
Evidence ledger4 credits
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author
- @zerocodefastSource for zerocodefast
Implementation · Pull request author