Documented changes
61 typed entries
Verified contributors
1 verified contributor · 26 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.50.0a4 is a preview release published 2026-10-18. Upstream documents: Guard 3.50.0a4 is an opt-in prerelease cut from 1dcaec5. Stable installations remain on the stable channel. 26 commits • 26 merged pull requests • 1 contributor since Guard 3.50.0a3. Its comparison base is alpha/v3.50.0a3. It includes 26 verified contribution deliveries with public evidence links.
Changes
Added
10- pretool: Prove a patch check the way it reports (#5109) Evidence for this change
- runtime: Record Composio provider discovery in the guard store resident (#5112) Evidence for this change
- extensions: Reuse validated packs in catalog-free compiler sessions (#5114) Evidence for this change
- runtime: Record native decision receipts in the resident store (#5107) Evidence for this change
- approvals: Inspect bounded Bash subjects (#5097) Evidence for this change
- runtime: Port the hook evidence writer's journal, receipt, Composio and correlation seams (#5098) Evidence for this change
- extensions: Compile immutable policy packs with a bounded index (#5105) Evidence for this change
- Add an offline native pack compiler with global ownership, dependency, trust and compatibility-inventory checks. Per-extension programs share immutable matcher objects; public descriptors remain identical to the… Evidence for this change
- Store bounded objects behind a hash-trie index. Verify lookup lengths, digests, routing and counts; preserve unrelated pages when entries change. Stage objects with byte-checked reuse and publish the root only after… Evidence for this change
- Keep contributor commands, source schemas, default-off external activation and legacy admission limits unchanged. Pack hashes require an authenticated release binding and introduce no runtime activation or download path. Evidence for this change
Improved
2- runtime: Decide post-hook command pairing in the native writer (#5103) Evidence for this change
- runtime: Give the evidence writer one pre-hook persistence path (#5099) Evidence for this change
Fixed
19- daemon: Find a local CLI on the agent's PATH, not the daemon's (#5123) Evidence for this change
- A CLI the user had already allowed still came back as a review, because its grant was never matched. Evidence for this change
- An unset-up CLI got a generic per-action review instead of a
connector:setup card, and the agent was told to retry after approval. Evidence for this change - Observations missed the CLI. Evidence for this change
- guard: Keep pack interface checks after the admission split (#5119) Evidence for this change
- pretool: Read a Docker version banner as the listing it already allows (#5117) Evidence for this change
- guard: Bring the Windows and Linux nightly native checks back to green (#5075) Evidence for this change
- command: Read a program lookup as the list of names it prints (#5116) Evidence for this change
- pretool: Keep a globbed gitignore negation instead of voiding the proof (#5113) Evidence for this change
- pretool: Read a loop body's bare name as the name something binds (#5110) Evidence for this change
- guard: Read a fetch dry run as the refresh it describes (#5108) Evidence for this change
- guard: Read a process id beside a quoted word the way the shell reads it (#5106) Evidence for this change
- native: Model a shell's inline script instead of blocking it unapprovably (#5088) Evidence for this change
- daemon: Adopt the spawned one-file child on Windows (#5104) Evidence for this change
- On Windows, the parent that spawns a one-file daemon treats the child that publishes daemon state as that launch. The match is the same serve command the still-starting path already uses, so the first wait can return… Evidence for this change
- A same-version daemon in another source root is accepted before hashing that tree. A same-root fingerprint mismatch still rejects. Evidence for this change
- pretool: Read find operands as the words the shell hands the program (#5100) Evidence for this change
- pretool: Read a loop rebinding as the word the shell builds (#5102) Evidence for this change
- pretool: Screen .npmrc keys the way npm reads them (#5101) Evidence for this change
Other changes
30- Documented change: Guard 3.50.0a4 is an opt-in prerelease cut from
1dcaec5. Stable installations remain on the stable channel. 26 commits • 26 merged pull requests • 1 contributor since Guard 3.50.0a3. Evidence for this change - guard: Admit the embedded command program without re-proving its build checks (#5086) Evidence for this change
- extensions: Index active rules and reuse matcher memo storage (#5111) Evidence for this change
- canary: Provision private Windows verifier keys (#5091) Evidence for this change
- Merged pull request #5106: fix(guard): read a process id beside a quoted word the way the shell reads it (#5106) Evidence for this change
- Merged pull request #5102: fix(pretool): read a loop rebinding as the word the shell builds (#5102) Evidence for this change
- Merged pull request #5091: test(canary): provision private Windows verifier keys (#5091) Evidence for this change
- Merged pull request #5086: perf(guard): admit the embedded command program without re-proving its build checks (#5086) Evidence for this change
- Merged pull request #5110: fix(pretool): read a loop body's bare name as the name something binds (#5110) Evidence for this change
- Merged pull request #5103: refactor(runtime): decide post-hook command pairing in the native writer (#5103) Evidence for this change
- Merged pull request #5097: feat(approvals): inspect bounded Bash subjects (#5097) Evidence for this change
- Merged pull request #5107: feat(runtime): record native decision receipts in the resident store (#5107) Evidence for this change
- Merged pull request #5098: feat(runtime): port the hook evidence writer's journal, receipt, Composio and correlation seams (#5098) Evidence for this change
- Merged pull request #5119: fix(guard): keep pack interface checks after the admission split (#5119) Evidence for this change
- Merged pull request #5116: fix(command): read a program lookup as the list of names it prints (#5116) Evidence for this change
- Merged pull request #5088: fix(native): model a shell's inline script instead of blocking it unapprovably (#5088) Evidence for this change
- Merged pull request #5114: feat(extensions): reuse validated packs in catalog-free compiler sessions (#5114) Evidence for this change
- Merged pull request #5099: refactor(runtime): give the evidence writer one pre-hook persistence path (#5099) Evidence for this change
- Merged pull request #5104: fix(daemon): adopt the spawned one-file child on Windows (#5104) Evidence for this change
- Merged pull request #5109: feat(pretool): prove a patch check the way it reports (#5109) Evidence for this change
- Merged pull request #5113: fix(pretool): keep a globbed gitignore negation instead of voiding the proof (#5113) Evidence for this change
- Merged pull request #5111: perf(extensions): index active rules and reuse matcher memo storage (#5111) Evidence for this change
- Merged pull request #5105: feat(extensions): compile immutable policy packs with a bounded index (#5105) Evidence for this change
- Merged pull request #5075: fix(guard): bring the Windows and Linux nightly native checks back to green (#5075) Evidence for this change
- Merged pull request #5108: fix(guard): read a fetch dry run as the refresh it describes (#5108) Evidence for this change
- Merged pull request #5100: fix(pretool): read find operands as the words the shell hands the program (#5100) Evidence for this change
- Merged pull request #5112: feat(runtime): record Composio provider discovery in the guard store resident (#5112) Evidence for this change
- Merged pull request #5101: fix(pretool): screen .npmrc keys the way npm reads them (#5101) Evidence for this change
- Merged pull request #5123: fix(daemon): find a local CLI on the agent's PATH, not the daemon's (#5123) Evidence for this change
- Merged pull request #5117: fix(pretool): read a Docker version banner as the listing it already allows (#5117) Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.50.0a3
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
Evidence ledger26 credits
Source for zerocodefast