Release notes

HOL Guard v3.50.0a8

Preview

Published October 19, 2026Original GitHub release for alpha/v3.50.0a8

Documented changes

90 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.50.0a8 is a preview release published 2026-10-19. Upstream documents: Guard 3.50.0a8 is an opt-in prerelease cut from 6bcb72c. Stable installations remain on the stable channel. 42 commits • 42 merged pull requests • 9 contributors since Guard 3.50.0a7. Its comparison base is alpha/v3.50.0a7. It includes 50 verified contribution deliveries with public evidence links. Attribution for this release is being ve

Added

extensions: Load enabled policies independently of the catalog (#5246) Evidence for this change
dashboard: Redesign Home with particle brand mark and plain-language walkthrough (#5271) Evidence for this change
runtime: Move the routine local runner verdict into the resident parser (#5280) Evidence for this change
workflow: Decide GitHub workflow approval lineage in the native runtime (#5278) Evidence for this change
mcp: Add g-krusch MCP server contribution and trust binding (#5270) Evidence for this change
ci: Reject Guard modules that nothing references (#5268) Evidence for this change
hook: Let the resident name the action observe mode records (#5262) Evidence for this change
guard: Add a harness version coverage promotion command and enforce release binding on stable builds (#5252) Evidence for this change
mcp-servers: Add ops-brain MCP contribution (#5255) Evidence for this change
Add Kelados TTS command source extension (#3749) Evidence for this change
catalog: Register aseprite-lua-mcp extension (#5241) Evidence for this change
mcp-servers: Add DC Hub MCP contribution (#5176) Evidence for this change

Fixed

ci: Stop reading a renamed sibling import as filesystem I/O (#5285) Evidence for this change
runtime: Walk directories in a deterministic order (#5287) Evidence for this change
symlink_directory identity vector: the hashing pass stops at the first symlinked directory, so total_bytes and incomplete_state_hash depended on whether real/x.txt was hashed before dirlink (6 vs 4 bytes). Evidence for this change
original_python_kernel_plan_and_mount_contracts: the ordinary read-grant case returned [source.py, subdir/module.py] instead of the recorded [subdir/module.py, source.py]. Evidence for this change
runtime: Recognize a bounded local bun script chain in the resident (#5283) Evidence for this change
gauntlet: Build the post-merge hook case's fixture shape (#5284) Evidence for this change
pretool: Let a search reach a repository's own sign-in code (#5282) Evidence for this change
posttool: Keep in-workspace feature folders listable (#5281) Evidence for this change
package: Reuse saved allows of any scope, and review packages by risk instead of by default (#5250) Evidence for this change
pretool: Let a sibling's Jest run with a heap size and probe a sibling's workflows without review (#5275) Evidence for this change
A sibling's test runner with a Node heap size. node --max-old-space-size=4096 /node_modules/jest/bin/jest.js --config /jest.config.js was held, though the same command without the flag already… Evidence for this change
Probing a sibling's workflows. ls /.github/workflows/ 2>/dev/null against a checkout without that directory was held, and so was a names-only find /.github -name "*.yml" -o -name "*.yaml"… Evidence for this change
A missing .github component may appear anywhere in a probed path. Evidence for this change
pretool: Keep /usr/sbin and /sbin on the workspace sandbox PATH (#5277) Evidence for this change
pretool: Prove worktree add in repositories with large configs (#5274) Evidence for this change
tests: Compile the frozen v4 schema fixture under its real path (#5272) Evidence for this change
guard: Judge a bun shim script launch by the script, not its arguments' wording (#5192) Evidence for this change
The script's source: pretool/script_content reads it and its local imports with the same scan agent hooks use (read_graph, NODE_NETWORK / python_network, CREDENTIAL_STORE). A script that pairs a… Evidence for this change
The arguments after the script: an argument that resolves to a secret path (secret_path_probe::is_request_secret_path) is reviewed ("passes a secret file to a script"). Prose that only mentions one is data. Evidence for this change
Script launches covered: launched_script recognises them (bun/node/tsx/deno with a Node extension, bun run/deno run, python). A launcher reached through a link with no extension… Evidence for this change
guard: Give a stale tab its reload back when the user stays on the leave prompt (#5264) Evidence for this change
pretool: Review an env that names no program, contain the sealed macOS tool directories, and redact forwarded credentials from Gauntlet evidence (#5259) Evidence for this change
pretool: Read scratch files in the macOS private temporary directory (#5265) Evidence for this change
hook: Let the output review say whether it withheld the output (#5261) Evidence for this change
pretool: Let a proven fast-forward merge of origin run without review (#5245) Evidence for this change
runtime: Keep the supervisor exit hold on Windows only (#5249) Evidence for this change
gauntlet: Qualify against Oh My Pi 18.11.3 (#5254) Evidence for this change

Other changes

Documented change: Guard 3.50.0a8 is an opt-in prerelease cut from 6bcb72c. Stable installations remain on the stable channel. 42 commits • 42 merged pull requests • 9 contributors since Guard 3.50.0a7. Evidence for this change
Direct commit 89745d2f72c7: test(guard): cover a script whose own path names a secret and path arguments that only contain a secret word Evidence for this change
Merged pull request #3749: feat: add Kelados TTS command source extension (#3749) Evidence for this change
Direct commit 597ef704219f: Merge branch 'main' into add-dchub-mcp Evidence for this change
Merged pull request #5280: feat(runtime): move the routine local runner verdict into the resident parser (#5280) Evidence for this change
Merged pull request #5270: feat(mcp): add g-krusch MCP server contribution and trust binding (#5270) Evidence for this change
Merged pull request #5282: fix(pretool): let a search reach a repository's own sign-in code (#5282) Evidence for this change
Merged pull request #5289: deps: bump aiohttp to 3.14.4 for the request timeout advisory (#5289) Evidence for this change
Merged pull request #5276: docs(security): record the reviewed hook bridge argv disposition (#5276) Evidence for this change
Merged pull request #5241: feat(catalog): register aseprite-lua-mcp extension (#5241) Evidence for this change
Direct commit f5fe368fcaae: fix(guard): keep the reload claim when the user leaves past a draft's prompt Evidence for this change
Merged pull request #5254: fix(gauntlet): qualify against Oh My Pi 18.11.3 (#5254) Evidence for this change
Direct commit df6c160011ae: fix(guard): give a stale tab its reload back when the user stays on the leave prompt Evidence for this change
Merged pull request #5285: fix(ci): stop reading a renamed sibling import as filesystem I/O (#5285) Evidence for this change
Merged pull request #5268: feat(ci): reject Guard modules that nothing references (#5268) Evidence for this change
Merged pull request #5260: test(runtime): bring two Windows-only runtime tests up to date (#5260) Evidence for this change
Direct commit d0f681b37b73: fix(dashboard): show paused actions on Home and correct the hero's facts and walkthrough copy Evidence for this change
Merged pull request #5261: fix(hook): let the output review say whether it withheld the output (#5261) Evidence for this change
Merged pull request #5284: fix(gauntlet): build the post-merge hook case's fixture shape (#5284) Evidence for this change
Merged pull request #5249: fix(runtime): keep the supervisor exit hold on Windows only (#5249) Evidence for this change
Merged pull request #5262: feat(hook): let the resident name the action observe mode records (#5262) Evidence for this change
Merged pull request #5245: fix(pretool): let a proven fast-forward merge of origin run without review (#5245) Evidence for this change
Merged pull request #5278: feat(workflow): decide GitHub workflow approval lineage in the native runtime (#5278) Evidence for this change
Merged pull request #5255: feat(mcp-servers): add ops-brain MCP contribution (#5255) Evidence for this change
Merged pull request #5274: fix(pretool): prove worktree add in repositories with large configs (#5274) Evidence for this change
Merged pull request #5273: ci(io-gate): start the I/O ownership walk at the CLI hook command (#5273) Evidence for this change
Merged pull request #5279: chore(ci): raise win_amd64 package size budgets (#5279) Evidence for this change
Merged pull request #5192: fix(guard): judge a bun shim script launch by the script, not its arguments' wording (#5192) Evidence for this change
Merged pull request #5252: feat(guard): add a harness version coverage promotion command and enforce release binding on stable builds (#5252) Evidence for this change
Merged pull request #5294: test(extensions): split the claim-notice tests under the line guideline (#5294) Evidence for this change
Merged pull request #5281: fix(posttool): keep in-workspace feature folders listable (#5281) Evidence for this change
Merged pull request #5298: refactor(runtime): let the resident name the Claude pending permission it reads (#5298) Evidence for this change
Merged pull request #5259: fix(pretool): review an env that names no program, contain the sealed macOS tool directories, and redact forwarded credentials from Gauntlet evidence (#5259) Evidence for this change
Merged pull request #5275: fix(pretool): let a sibling's Jest run with a heap size and probe a sibling's workflows without review (#5275) Evidence for this change
Merged pull request #5283: fix(runtime): recognize a bounded local bun script chain in the resident (#5283) Evidence for this change
Merged pull request #5258: perf(hook): compose a hook's tool-action verdict once instead of twice (#5258) Evidence for this change
Direct commit cb6e4a77f9c2: Merge branch 'main' into feat/mcp-g-krusch Evidence for this change
Merged pull request #5265: fix(pretool): read scratch files in the macOS private temporary directory (#5265) Evidence for this change
Merged pull request #5246: feat(extensions): load enabled policies independently of the catalog (#5246) Evidence for this change
Merged pull request #5293: docs(guard): state what Guard enforces on Windows (#5293) Evidence for this change
Merged pull request #5256: test(hook): bound the native round trips one CLI hook may spend (#5256) Evidence for this change
Direct commit c6f0edbcd2af: Merge branch 'main' into add-kelados-command-source Evidence for this change
Merged pull request #5257: chore(review): flag new Python runtime code in PR review (#5257) Evidence for this change
Merged pull request #5176: feat(mcp-servers): add DC Hub MCP contribution (#5176) Evidence for this change
Merged pull request #5272: fix(tests): compile the frozen v4 schema fixture under its real path (#5272) Evidence for this change
Merged pull request #5277: fix(pretool): keep /usr/sbin and /sbin on the workspace sandbox PATH (#5277) Evidence for this change
Merged pull request #5264: fix(guard): give a stale tab its reload back when the user stays on the leave prompt (#5264) Evidence for this change
Merged pull request #5250: fix(package): reuse saved allows of any scope, and review packages by risk instead of by default (#5250) Evidence for this change
Merged pull request #5287: fix(runtime): walk directories in a deterministic order (#5287) Evidence for this change
Direct commit 959d43c3ff37: fix(gauntlet): redact a base64 credential as base64 really prints it Evidence for this change
Merged pull request #5271: feat(dashboard): redesign Home with particle brand mark and plain-language walkthrough (#5271) Evidence for this change

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.50.0a7

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.