Release notes

HOL Guard v3.47.0a4

Preview

Published October 16, 2026Original GitHub release for alpha/v3.47.0a4

Documented changes

35 typed entries

Verified contributors

3 verified contributors · 16 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.47.0a4 is a preview release published 2026-10-16. Upstream documents: Guard 3.47.0a4 is an opt-in prerelease cut from b64a00b. Stable installations remain on the stable channel. 15 commits • 8 merged pull requests • 3 contributors since Guard 3.47.0a3. Its comparison base is alpha/v3.47.0a3. It includes 16 verified contribution deliveries with public evidence links.

Added

dashboard: Rebuild the Extensions surface around one placement shelf (#4823) Evidence for this change

Fixed

guard: Resolve agent read allowances in one path spelling on Windows (ebc230b) Evidence for this change
guard: Report why native hook authority could not decide (#4828) Evidence for this change
guard: Review unmatched read-only shell shapes instead of blocking them (#4825) Evidence for this change
guard: Let approve-once settle pipelines, kubectl reads and project removals (#4818) Evidence for this change
Lists and pipelines: |, ||, && and ; are accepted when every command in them is bound on its own. Plain-file >, >>, >&, &> and and… Evidence for this change
Argv-determined programs: the bound set now includes rm, mkdir, mv, cp, ls, find (without -exec/-ok), sort (without --compress-program), jq/yq (without program files), and similar file… Evidence for this change
Remote programs: a kubectl exec/attach fed a local file with < binds to that file's content, resolved from the payload cwd, which the review-binding query now carries. Input piped to it stays unbound. The… Evidence for this change
guard: Treat quoted cat heredoc text as file content and list the doctl config directory (#4824) Evidence for this change
guard: Log the hook exception behind a fail-closed native deny (1ca0c80) Evidence for this change
guard: Keep the daemon cloud sync loop alive when the store cannot record an attempt (0cf4f06) Evidence for this change
guard: Stop reporting protection as active when no app is registered (88bf7b6) Evidence for this change
evidence: Show approved-once actions that stayed blocked as stopped (51bb46e) Evidence for this change

Other changes

Documented change: Guard 3.47.0a4 is an opt-in prerelease cut from b64a00b. Stable installations remain on the stable channel. 15 commits • 8 merged pull requests • 3 contributors since Guard 3.47.0a3. Evidence for this change
guard: Decide local tool approval eligibility in the resident (#4838) Evidence for this change
hooks: Record and grant local CLIs in one resident call (#4811) Evidence for this change
guard: Record only the test thread's retry waits in sync retry tests (#4814) Evidence for this change
Restore main test duration feedback after skipped planning (f90a156) Evidence for this change
Parallelize Windows runtime and MCP contract checks (c7769d1) Evidence for this change
Direct commit 765e84a8cf72: fix(dashboard): keep every paid placement visible and price each slot by its own product Evidence for this change
Merged pull request #4838: perf(guard): decide local tool approval eligibility in the resident (#4838) Evidence for this change
Merged pull request #4783: fix(guard): keep the daemon cloud sync loop alive when the store cannot record an attempt Evidence for this change
Merged pull request #4824: fix(guard): treat quoted cat heredoc text as file content and list the doctl config directory (#4824) Evidence for this change
Merged pull request #4822: ci: restore main test duration feedback after skipped planning Evidence for this change
Merged pull request #4814: test(guard): record only the test thread's retry waits in sync retry tests (#4814) Evidence for this change
Merged pull request #4811: perf(hooks): record and grant local CLIs in one resident call (#4811) Evidence for this change
Merged pull request #4795: fix(guard): stop reporting protection as active when no app is registered Evidence for this change
Merged pull request #4793: fix(guard): log the hook exception behind a fail-closed native deny Evidence for this change
Merged pull request #4825: fix(guard): review unmatched read-only shell shapes instead of blocking them (#4825) Evidence for this change
Merged pull request #4804: fix(guard): resolve agent read allowances in one path spelling on Windows Evidence for this change
Merged pull request #4815: ci: parallelize Windows runtime and MCP contract checks Evidence for this change
Merged pull request #4823: feat(dashboard): rebuild the Extensions surface around one placement shelf (#4823) Evidence for this change
Merged pull request #4812: fix(evidence): show approved-once actions that stayed blocked as stopped Evidence for this change
Merged pull request #4828: fix(guard): report why native hook authority could not decide (#4828) Evidence for this change
Merged pull request #4818: fix(guard): let approve-once settle pipelines, kubectl reads and project removals (#4818) Evidence for this change

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.47.0a3

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.