Documented changes
40 typed entries
Verified contributors
1 verified contributor · 15 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.47.0a8 is a preview release published 2026-10-16. Upstream documents: Guard 3.47.0a8 is an opt-in prerelease cut from 9fb9e6f. Stable installations remain on the stable channel. 15 commits • 14 merged pull requests • 2 contributors since Guard 3.47.0a7. Its comparison base is alpha/v3.47.0a7. It includes 15 verified contribution deliveries with public evidence links.
Changes
Added
6- guard: Run the native MCP relay on Windows (#4905) Evidence for this change
- The resident advertises
mcp-stdio-relay-v1on every platform, not just unix. Evidence for this change native_mcp_relay()no longer excludesos.name == "nt", so Windows installs of the Codex, Copilot, Cursor and OpenCode MCP proxies launch through the native relay when the runtime advertises it. Frozen builds still… Evidence for this change- On Windows the relay runs the MCP server in a kill-on-close JobObject (the existing
ChildTree), and a Python proxy hand-off runs as a contained child. Evidence for this change - guard: Hydrate a relayed package call's policy view from the bound config (#4914) Evidence for this change
- guard: Assemble the relay's native package evaluation (#4913) Evidence for this change
Improved
1- guard: Stop the stdio proxy and relay drain importing the MCP proxy module (#4922) Evidence for this change
Fixed
17- guard: Build the Windows path helpers under strict clippy (#4936) Evidence for this change
- Restore extension discovery and both placements on an installed build (#4931) Evidence for this change
- guard: Allow node --check syntax checks of local and served scripts (#4932) Evidence for this change
- guard: Contain the Codex safety-guide read when it is chained with a workspace file listing (#4930) Evidence for this change
- guard: Free a hook's review slot before its answer is sent (#4928) Evidence for this change
hook_scheduler_was_not_idle_while_stabilizingEvidence for this changehook_scheduler_capacity_was_not_steady_after_prewarmEvidence for this changeresident_worker_capacity_was_not_full_before_rss_baselineEvidence for this changenpm ci --ignore-scripts, from a committed lockfile. Evidence for this change- guard: Stop blocking chains that start by setting a plain shell variable (
955a507) Evidence for this change - guard: Build the package evaluation spool on Windows (#4924) Evidence for this change
- guard: Let saved Always answer Windows file reads and searches (#4923) Evidence for this change
- guard: Queue a post-claim re-approval from the native MCP relay (#4920) Evidence for this change
tool_postclaimre-approval: it now routes to the queue with the disposition's policy action, where it used to be an error. Evidence for this change- Safe-alternative mode: the block is settled inside the claim's write transaction, so it commits atomically with the claim. Evidence for this change
- Ask mode:
ask::queueis split intoprepareandwrite. Evidence for this change - guard: Run local dev servers from workspace scripts in the sandbox without review (#4912) Evidence for this change
Other changes
16- Documented change: Guard 3.47.0a8 is an opt-in prerelease cut from
9fb9e6f. Stable installations remain on the stable channel. 15 commits • 14 merged pull requests • 2 contributors since Guard 3.47.0a7. Evidence for this change - Merged pull request #4931: fix: restore extension discovery and both placements on an installed build (#4931) Evidence for this change
- Merged pull request #4913: feat(guard): assemble the relay's native package evaluation (#4913) Evidence for this change
- Merged pull request #4922: refactor(guard): stop the stdio proxy and relay drain importing the MCP proxy module (#4922) Evidence for this change
- Merged pull request #4925: fix(guard): stop blocking chains that start by setting a plain shell variable Evidence for this change
- Merged pull request #4924: fix(guard): build the package evaluation spool on Windows (#4924) Evidence for this change
- Merged pull request #4905: feat(guard): run the native MCP relay on Windows (#4905) Evidence for this change
- Merged pull request #4923: fix(guard): let saved Always answer Windows file reads and searches (#4923) Evidence for this change
- Merged pull request #4932: fix(guard): allow node --check syntax checks of local and served scripts (#4932) Evidence for this change
- Merged pull request #4920: fix(guard): queue a post-claim re-approval from the native MCP relay (#4920) Evidence for this change
- Merged pull request #4930: fix(guard): contain the Codex safety-guide read when it is chained with a workspace file listing (#4930) Evidence for this change
- Merged pull request #4929: fix(guard): tell agents the script-free npm install Guard lets continue (#4929) Evidence for this change
- Merged pull request #4914: feat(guard): hydrate a relayed package call's policy view from the bound config (#4914) Evidence for this change
- Merged pull request #4928: fix(guard): free a hook's review slot before its answer is sent (#4928) Evidence for this change
- Merged pull request #4936: fix(guard): build the Windows path helpers under strict clippy (#4936) Evidence for this change
- Merged pull request #4912: fix(guard): run local dev servers from workspace scripts in the sandbox without review (#4912) Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.47.0a7
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
Evidence ledger15 credits
Source for zerocodefast