Release notes

HOL Guard v3.44.0a7

Preview

Published October 13, 2026Original GitHub release for alpha/v3.44.0a7

Documented changes

50 typed entries

Verified contributors

2 verified contributors · 18 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.44.0a7 is a preview release published 2026-10-13. Upstream documents: Guard 3.44.0a7 is an opt-in prerelease cut from [`55c25e1`](https://github.com/hashgraph-online/hol-guard/commit/55c25e1f8a1e28e1a117c1c4c20416de285e57d8). Stable installations remain on the stable channel. **17 commits • 17 merged pull requests • 2 contributors** since [Guard 3.44.0a6](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a6). Its comparison base is alpha/v3.44.0a6. It includes 18 verified contribution deliveries with public evidence links.

Changes

Added16
Improved2
Fixed5
Other changes27

Added

16

**guard**: Answer Cursor after-shell and after-MCP observers without starting Python ([#4416](https://github.com/hashgraph-online/hol-guard/pull/4416)) Evidence for: **guard**: Answer Cursor after-shell and after-MCP observers without starting Python ([#4416](https://github.com/hashgraph-online/hol-guard/pull/4416))
The Cursor bridge now sends these two observers to the resident as a `PostToolUse` via the existing direct answer. Once the resident answers with a JSON object, the bridge prints `{}` and exits 0, which is what the… Evidence for: The Cursor bridge now sends these two observers to the resident as a `PostToolUse` via the existing direct answer. Once the resident answers with a JSON object, the bridge prints `{}` and exits 0, which is what the…
The resident accepts Cursor `PostToolUse` on the existing post-tool lane, which queues the evidence for the daemon's drain. It still turns away Cursor prompts. Evidence for: The resident accepts Cursor `PostToolUse` on the existing post-tool lane, which queues the evidence for the daemon's drain. It still turns away Cursor prompts.
Any of these fall back to the Python client, as before: a missing resident, a deferral, a body the client would reject, event names spelled with underscores or dashes, and non-ASCII event names. Evidence for: Any of these fall back to the Python client, as before: a missing resident, a deferral, a body the client would reject, event names spelled with underscores or dashes, and non-ASCII event names.
**guard**: Fall through temporary workspace roots in the resident direct hook lane ([#4415](https://github.com/hashgraph-online/hol-guard/pull/4415)) Evidence for: **guard**: Fall through temporary workspace roots in the resident direct hook lane ([#4415](https://github.com/hashgraph-online/hol-guard/pull/4415))
A temporary `cwd` or query is now skipped (`Ok(None)`), and the next candidate decides. When every candidate is skipped, the answer is `direct_hook_workspace_missing`, matching the daemon, which has no workspace either. Evidence for: A temporary `cwd` or query is now skipped (`Ok(None)`), and the next candidate decides. When every candidate is skipped, the answer is `direct_hook_workspace_missing`, matching the daemon, which has no workspace either.
The temporary-root check now follows `trusted_temporary_root_for_path` step for step: the lexical check against the roots in Python's order (including the macOS per-user `/var/folders/ / /T` root), a… Evidence for: The temporary-root check now follows `trusted_temporary_root_for_path` step for step: the lexical check against the roots in Python's order (including the macOS per-user `/var/folders/ / /T` root), a…
A verdict that only this process's own temp directory decides still defers, since the daemon's `tempfile.gettempdir()` is not visible here. Evidence for: A verdict that only this process's own temp directory decides still defers, since the daemon's `tempfile.gettempdir()` is not visible here.
**guard**: Answer custom extension blocks in the resident direct hook lane ([#4406](https://github.com/hashgraph-online/hol-guard/pull/4406)) Evidence for: **guard**: Answer custom extension blocks in the resident direct hook lane ([#4406](https://github.com/hashgraph-online/hol-guard/pull/4406))
**No launch, no grant, `allowed` or `none`:** the edge response is returned unchanged, as before. Evidence for: **No launch, no grant, `allowed` or `none`:** the edge response is returned unchanged, as before.
**`blocked`:** the resident returns the response the daemon builds. The edge result becomes a deny with `local_cli_extension_blocked` and "Your custom extension rules block this {name} command.", is rendered, and is… Evidence for: **`blocked`:** the resident returns the response the daemon builds. The edge result becomes a deny with `local_cli_extension_blocked` and "Your custom extension rules block this {name} command.", is rendered, and is…
**Watch:** the block applies only when the edge's decision and `minimum_action` are both allow, matching the daemon, and the answer is the Watch continue the daemon renders. Evidence for: **Watch:** the block applies only when the edge's decision and `minimum_action` are both allow, matching the daemon, and the answer is the Watch continue the daemon renders.
**guard**: Answer Claude permission prompt notifications from the resident ([#4403](https://github.com/hashgraph-online/hol-guard/pull/4403)) Evidence for: **guard**: Answer Claude permission prompt notifications from the resident ([#4403](https://github.com/hashgraph-online/hol-guard/pull/4403))
`permission_prompt` notifications run in one SQLite transaction: Evidence for: `permission_prompt` notifications run in one SQLite transaction:
The resident loads the session's pending permission notice under the bound integrity key and marks it seen. Evidence for: The resident loads the session's pending permission notice under the bound integrity key and marks it seen.
It appends the `claude/permission_prompt` event the daemon writes. Evidence for: It appends the `claude/permission_prompt` event the daemon writes.

Improved

2

**guard**: Delete dead Python migration code and orphaned unit tests ([#4413](https://github.com/hashgraph-online/hol-guard/pull/4413)) Evidence for: **guard**: Delete dead Python migration code and orphaned unit tests ([#4413](https://github.com/hashgraph-online/hol-guard/pull/4413))
**ci**: Retire obsolete Python-to-Rust migration recorders ([#4408](https://github.com/hashgraph-online/hol-guard/pull/4408)) Evidence for: **ci**: Retire obsolete Python-to-Rust migration recorders ([#4408](https://github.com/hashgraph-online/hol-guard/pull/4408))

Fixed

5

**guard**: Keep git read proofs after a glob-pathspec log in the same command ([#4417](https://github.com/hashgraph-online/hol-guard/pull/4417)) Evidence for: **guard**: Keep git read proofs after a glob-pathspec log in the same command ([#4417](https://github.com/hashgraph-online/hol-guard/pull/4417))
no `--output`, `-o`, `--ext-diff` or `--textconv` before `--`; Evidence for: no `--output`, `-o`, `--ext-diff` or `--textconv` before `--`;
no leading `--exec-path`. Evidence for: no leading `--exec-path`.
**guard**: Stop flagging everyday search, process, push and env-prefixed build commands ([#4350](https://github.com/hashgraph-online/hol-guard/pull/4350)) Evidence for: **guard**: Stop flagging everyday search, process, push and env-prefixed build commands ([#4350](https://github.com/hashgraph-online/hol-guard/pull/4350))
**guard**: Let agents read files found with find -exec or xargs -0 without review ([#4396](https://github.com/hashgraph-online/hol-guard/pull/4396)) Evidence for: **guard**: Let agents read files found with find -exec or xargs -0 without review ([#4396](https://github.com/hashgraph-online/hol-guard/pull/4396))

Other changes

27

Documented change: Guard 3.44.0a7 is an opt-in prerelease cut from [`55c25e1`](https://github.com/hashgraph-online/hol-guard/commit/55c25e1f8a1e28e1a117c1c4c20416de285e57d8). Stable installations remain on the stable channel. **17 commits • 17 merged pull requests • 2 contributors** since [Guard 3.44.0a6](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a6). Evidence for: Documented change: Guard 3.44.0a7 is an opt-in prerelease cut from [`55c25e1`](https://github.com/hashgraph-online/hol-guard/commit/55c25e1f8a1e28e1a117c1c4c20416de285e57d8). Stable installations remain on the stable channel. **17 commits • 17 merged pull requests • 2 contributors** since [Guard 3.44.0a6](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.44.0a6).
**guard**: Read custom-extension grants and command choices in the resident store op ([#4414](https://github.com/hashgraph-online/hol-guard/pull/4414)) Evidence for: **guard**: Read custom-extension grants and command choices in the resident store op ([#4414](https://github.com/hashgraph-online/hol-guard/pull/4414))
**guard**: Find and record observed MCP connections in the resident store op ([#4412](https://github.com/hashgraph-online/hol-guard/pull/4412)) Evidence for: **guard**: Find and record observed MCP connections in the resident store op ([#4412](https://github.com/hashgraph-online/hol-guard/pull/4412))
**ci**: Avoid redundant Rust cache fallback restores ([#4410](https://github.com/hashgraph-online/hol-guard/pull/4410)) Evidence for: **ci**: Avoid redundant Rust cache fallback restores ([#4410](https://github.com/hashgraph-online/hol-guard/pull/4410))
**guard**: Record and forget observed custom extensions in the resident store op ([#4409](https://github.com/hashgraph-online/hol-guard/pull/4409)) Evidence for: **guard**: Record and forget observed custom extensions in the resident store op ([#4409](https://github.com/hashgraph-online/hol-guard/pull/4409))
**guard**: Build the generic hook's approval context token in the saved-decision lookup ([#4407](https://github.com/hashgraph-online/hol-guard/pull/4407)) Evidence for: **guard**: Build the generic hook's approval context token in the saved-decision lookup ([#4407](https://github.com/hashgraph-online/hol-guard/pull/4407))
**ci**: Shard every AWS native safety assertion without losing cases ([#4420](https://github.com/hashgraph-online/hol-guard/pull/4420)) Evidence for: **ci**: Shard every AWS native safety assertion without losing cases ([#4420](https://github.com/hashgraph-online/hol-guard/pull/4420))
Finish native evaluator producer under five minutes without skipping gates ([#4411](https://github.com/hashgraph-online/hol-guard/pull/4411)) Evidence for: Finish native evaluator producer under five minutes without skipping gates ([#4411](https://github.com/hashgraph-online/hol-guard/pull/4411))
Compile guard-command tests as one binary and shard the replay gates ([#4401](https://github.com/hashgraph-online/hol-guard/pull/4401)) Evidence for: Compile guard-command tests as one binary and shard the replay gates ([#4401](https://github.com/hashgraph-online/hol-guard/pull/4401))
Merged pull request #4420: test(ci): distribute complete AWS safety contract commands across bounded pytest nodes (#4420) Evidence for: Merged pull request #4420: test(ci): distribute complete AWS safety contract commands across bounded pytest nodes (#4420)
Merged pull request #4411: ci: finish native evaluator producer under five minutes without skipping gates (#4411) Evidence for: Merged pull request #4411: ci: finish native evaluator producer under five minutes without skipping gates (#4411)
Merged pull request #4409: perf(guard): record and forget observed custom extensions in the resident store op (#4409) Evidence for: Merged pull request #4409: perf(guard): record and forget observed custom extensions in the resident store op (#4409)
Merged pull request #4414: perf(guard): read custom-extension grants and command choices in the resident store op (#4414) Evidence for: Merged pull request #4414: perf(guard): read custom-extension grants and command choices in the resident store op (#4414)
Merged pull request #4407: perf(guard): build the generic hook's approval context token in the saved-decision lookup (#4407) Evidence for: Merged pull request #4407: perf(guard): build the generic hook's approval context token in the saved-decision lookup (#4407)
Merged pull request #4350: fix(guard): stop flagging everyday search, process, push and env-prefixed build commands (#4350) Evidence for: Merged pull request #4350: fix(guard): stop flagging everyday search, process, push and env-prefixed build commands (#4350)
Merged pull request #4417: fix(guard): keep git read proofs after a glob-pathspec log in the same command (#4417) Evidence for: Merged pull request #4417: fix(guard): keep git read proofs after a glob-pathspec log in the same command (#4417)
Direct commit bdaad081bd1f: test(guard): reconcile sandbox-enabled benign gate cases Evidence for: Direct commit bdaad081bd1f: test(guard): reconcile sandbox-enabled benign gate cases
Merged pull request #4403: feat(guard): answer Claude permission prompt notifications from the resident (#4403) Evidence for: Merged pull request #4403: feat(guard): answer Claude permission prompt notifications from the resident (#4403)
Merged pull request #4415: feat(guard): fall through temporary workspace roots in the resident direct hook lane (#4415) Evidence for: Merged pull request #4415: feat(guard): fall through temporary workspace roots in the resident direct hook lane (#4415)
Merged pull request #4401: ci: compile guard-command tests as one binary and shard the replay gates (#4401) Evidence for: Merged pull request #4401: ci: compile guard-command tests as one binary and shard the replay gates (#4401)
Merged pull request #4410: perf(ci): skip fallback downloads after partial Rust cache restores (#4410) Evidence for: Merged pull request #4410: perf(ci): skip fallback downloads after partial Rust cache restores (#4410)
Merged pull request #4396: fix(guard): let agents read files found with find -exec or xargs -0 without review (#4396) Evidence for: Merged pull request #4396: fix(guard): let agents read files found with find -exec or xargs -0 without review (#4396)
Merged pull request #4408: refactor(ci): retire one-time Python migration parity recorders (#4408) Evidence for: Merged pull request #4408: refactor(ci): retire one-time Python migration parity recorders (#4408)
Merged pull request #4406: feat(guard): answer custom extension blocks in the resident direct hook lane (#4406) Evidence for: Merged pull request #4406: feat(guard): answer custom extension blocks in the resident direct hook lane (#4406)
Merged pull request #4413: refactor: remove dead Python command migration converters and native-ported helpers (#4413) Evidence for: Merged pull request #4413: refactor: remove dead Python command migration converters and native-ported helpers (#4413)
Merged pull request #4412: perf(guard): find and record observed MCP connections in the resident store op (#4412) Evidence for: Merged pull request #4412: perf(guard): find and record observed MCP connections in the resident store op (#4412)
Merged pull request #4416: feat(guard): answer Cursor after-shell and after-MCP observers in the native bridge (#4416) Evidence for: Merged pull request #4416: feat(guard): answer Cursor after-shell and after-MCP observers in the native bridge (#4416)

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.44.0a6

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

@kantorcodes
Implementation · 6 credits
@zerocodefast
Implementation · 12 credits

Evidence ledger18 credits

@kantorcodes
Implementation · Pull request author
Source for kantorcodes
@kantorcodes
Implementation · Pull request author
Source for kantorcodes
@kantorcodes
Implementation · Verified commit author
Source for kantorcodes
@kantorcodes
Implementation · Pull request author
Source for kantorcodes
@kantorcodes
Implementation · Pull request author
Source for kantorcodes
@kantorcodes
Implementation · Pull request author
Source for kantorcodes
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast
@zerocodefast
Implementation · Pull request author
Source for zerocodefast