Release notes

HOL Guard v3.50.0a2

Preview

Published October 17, 2026Original GitHub release for alpha/v3.50.0a2

Documented changes

78 typed entries

Verified contributors

9 verified contributors · 38 credits

View the complete verified roster

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.50.0a2 is a preview release published 2026-10-17. Upstream documents: Guard 3.50.0a2 is an opt-in prerelease cut from df47037. Stable installations remain on the stable channel. 35 commits • 35 merged pull requests • 8 contributors since Guard 3.50.0a1. Its comparison base is alpha/v3.50.0a1. It includes 38 verified contribution deliveries with public evidence links.

Added

guard: Group reviews of MCP servers this device was never set up for (#5072) Evidence for this change
dashboard: Show one setup card per connector in the inbox (#5065) Evidence for this change
The card says what the tool is, what the agent was doing, and which catalog commands it tried. It shows top-level command names only, never operands. Evidence for this change
The call count is the sum of dedupe_count across the rows, so merged retries are counted. Evidence for this change
When any row is destructive, touches sensitive data, or carries extension_recommendation.caution, the card shows a caution note and "Set up" drops to an outline button. Evidence for this change
mcp: Add CI Guard MCP server contribution (#5082) Evidence for this change
Identifier: mcp.ci-guard (command.mcp-ci-guard) Evidence for this change
Trust Class: external (opt-in) Evidence for this change
approvals: Raise one setup notice per connector instead of one per command (#5077) Evidence for this change
mcp-servers: Add OpenScreenShot MCP contribution (#4991) Evidence for this change
extensions: Add command.kintsua command safety extension (#5047) Evidence for this change
guard: Group reviews of CLIs this device was never set up for (#5063) Evidence for this change
guard: Prove the two Git listings that only print (#5058) Evidence for this change
guard: List configured MCP servers in mcp list, status and doctor (#5061) Evidence for this change
mcp-servers: Add Seq MCP Server contribution configuration. (#5056) Evidence for this change
extensions: Add command.skills-check-updates command source (#4918) Evidence for this change
dashboard: Set up custom extensions with the same family browser as the detail page (#5048) Evidence for this change

Fixed

guard: Treat the approval queue and retry hint reads as read-only (#5081) Evidence for this change
guard: Bind one-time approval to env-prefixed commands and mark rows that cannot unlock (#5079) Evidence for this change
guard: Route a package script by its body, not its name (#5067) Evidence for this change
hooks: Keep approval links out of default-mode connector setup reasons (#5070) Evidence for this change
hooks: Wait out a policy update instead of failing the hook (#5068) Evidence for this change
Daemon: review_native_edge polls every 100 ms and re-admits the same request once the lock clears. The wait is 8 seconds or the hook's remaining deadline minus 500 ms, whichever is shorter: 250 ms lets the last… Evidence for this change
Readiness: if the policy publisher's readiness wait fails because of this lock, the user gets the same message instead of the raw code. Evidence for this change
Direct path (Rust): polls the same way within its request budget. If the lock is still held, it hands the call to the daemon, which gives the answer. The direct path never decides the call itself. A direct hook… Evidence for this change
guard: Release an approved Oh My Pi learn that also writes a skill (#5060) Evidence for this change
an object with exactly action, name, description and body, all strings; Evidence for this change
action is create or update, not delete; Evidence for this change
name matches the rule OMP's skill registry enforces: ^[a-z0-9]+(?:-[a-z0-9]+)*$, at most 64 characters. A path-shaped or otherwise unusual name keeps the ordinary path. Evidence for this change
guard: Say what the workspace sandbox blocked when a contained run fails (#5069) Evidence for this change
approvals: Reject consent that cannot authorize a retry (#5054) Evidence for this change
Reject once consent when a native review has no usable retry binding, including requests from older clients. Return execution capabilities separately from persistence eligibility. Evidence for this change
Hide unavailable approval controls, require explicit persistent consent where eligible, and stop mixed bulk selections before requesting credentials. Preserve the selected duration through the extension shortcut and… Evidence for this change
Add sanitized Bash maintenance fixtures and native, transport, and browser regressions for unavailable approvals. Evidence for this change
guard: Run a Prettier format check inside read-only containment (#5057) Evidence for this change
guard: Contain Yarn and bare pnpm script runs like npm run (#5055) Evidence for this change
guard: Reload dashboard tabs left on a bundle from before an update (#5051) Evidence for this change
guard: Read a command written inside a double-quoted brace (#5038) Evidence for this change
dashboard: Repeat the sponsor slot every ten extensions in the catalog feed (#5045) Evidence for this change

Other changes

Documented change: Guard 3.50.0a2 is an opt-in prerelease cut from df47037. Stable installations remain on the stable channel. 35 commits • 35 merged pull requests • 8 contributors since Guard 3.50.0a1. Evidence for this change
Merged pull request #5055: fix(guard): contain Yarn and bare pnpm script runs like npm run (#5055) Evidence for this change
Merged pull request #5072: feat(guard): group reviews of MCP servers this device was never set up for (#5072) Evidence for this change
Merged pull request #5060: fix(guard): release an approved Oh My Pi learn that also writes a skill (#5060) Evidence for this change
Merged pull request #5065: feat(dashboard): show one setup card per connector in the inbox (#5065) Evidence for this change
Merged pull request #5077: feat(approvals): raise one setup notice per connector instead of one per command (#5077) Evidence for this change
Merged pull request #5079: fix(guard): bind one-time approval to env-prefixed commands and mark rows that cannot unlock (#5079) Evidence for this change
Merged pull request #5061: feat(guard): list configured MCP servers in mcp list, status and doctor (#5061) Evidence for this change
Direct commit 47e8ebfb6e9c: Merge branch 'main' into add-seq-mcp-server Evidence for this change
Merged pull request #5070: fix(hooks): keep approval links out of default-mode connector setup reasons (#5070) Evidence for this change
Merged pull request #5076: ci(guard): keep the failed resident-stop diagnostic through session teardown (#5076) Evidence for this change
Merged pull request #5050: test(ci): push a bound command program into the native end-to-end fixture (#5050) Evidence for this change
Merged pull request #5037: fix(guard): read the program a scheduling prefix runs (#5037) Evidence for this change
Merged pull request #5058: feat(guard): prove the two Git listings that only print (#5058) Evidence for this change
Merged pull request #4918: feat(extensions): add command.skills-check-updates command source (#4918) Evidence for this change
Merged pull request #5080: test(guard): cover connector setup in the benign false-positive gate (#5080) Evidence for this change
Merged pull request #5051: fix(guard): reload dashboard tabs left on a bundle from before an update (#5051) Evidence for this change
Merged pull request #5068: fix(hooks): wait out a policy update instead of failing the hook (#5068) Evidence for this change
Merged pull request #5067: fix(guard): route a package script by its body, not its name (#5067) Evidence for this change
Merged pull request #5063: feat(guard): group reviews of CLIs this device was never set up for (#5063) Evidence for this change
Merged pull request #5053: perf(runtime): look up resident process images directly on Windows (#5053) Evidence for this change
Merged pull request #5057: fix(guard): run a Prettier format check inside read-only containment (#5057) Evidence for this change
Merged pull request #5048: feat(dashboard): set up custom extensions with the same family browser as the detail page (#5048) Evidence for this change
Merged pull request #5035: fix(guard): contain a sibling build the agent spells from home (#5035) Evidence for this change
Merged pull request #5073: test(gauntlet): add connector setup scenarios and a private-token check (#5073) Evidence for this change
Direct commit b75d1deeb052: Merge remote-tracking branch 'origin/main' into repair/pr-4918 Evidence for this change
Merged pull request #4991: feat(mcp-servers): add OpenScreenShot MCP contribution (#4991) Evidence for this change
Merged pull request #5056: feat(mcp-servers): Add Seq MCP Server contribution configuration. (#5056) Evidence for this change
Merged pull request #5082: feat(mcp): add CI Guard MCP server contribution (#5082) Evidence for this change
Merged pull request #5038: fix(guard): read a command written inside a double-quoted brace (#5038) Evidence for this change
Merged pull request #5064: perf(guard): load the packaged command program during resident self-check (#5064) Evidence for this change
Merged pull request #5045: fix(dashboard): repeat the sponsor slot every ten extensions in the catalog feed (#5045) Evidence for this change
Merged pull request #5081: fix(guard): treat the approval queue and retry hint reads as read-only (#5081) Evidence for this change
Merged pull request #5054: fix(approvals): reject consent that cannot authorize a retry (#5054) Evidence for this change
Merged pull request #5059: perf(guard): hash the resident runtime with hardware SHA-256 (#5059) Evidence for this change
Direct commit c42654f9d9ea: fix(guard): reload dashboard tabs left on a bundle from before an update Evidence for this change
Merged pull request #5043: fix(guard): let git blame, describe and reflog read history without review (#5043) Evidence for this change
Merged pull request #5047: feat(extensions): add command.kintsua command safety extension (#5047) Evidence for this change
Merged pull request #5069: fix(guard): say what the workspace sandbox blocked when a contained run fails (#5069) Evidence for this change

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.50.0a1

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.