Documented changes
27 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.52.0a1 is a preview release published 2026-10-20. Upstream documents: Guard 3.52.0a1 is an opt-in prerelease cut from 3c3d1ad. Stable installations remain on the stable channel. 21 commits • 21 merged pull requests • 1 contributor since Guard 3.51.0. Attribution for this release is being verified.
Changes
Added
3- windows: Run a project's pytest inside read-only containment (#5422) Evidence for this change
- containment: Let the resident answer containment health (#5417) Evidence for this change
- Add a merge-freeze gate toggled by a repository variable (#5434) Evidence for this change
Improved
2- contained: Retire the Python workspace snapshot (#5430) Evidence for this change
- contained: Prove the real Linux backend from the native runner (#5426) Evidence for this change
Fixed
18- fleet: Report AIBOM-detected items and name machines by host name (#5440) Evidence for this change
- Inventory. Fleet posture read only the local inventory table. Guard writes that table when it scans an artifact itself (a
hol-guard runlaunch, an install, a consumer scan). Machines protected through hooks… Evidence for this change - Machine name. The local device row is seeded with the label "Local machine", and nothing replaced it unless the user ran
hol-guard device label set. Evidence for this change - guard: Record a failing catalog preparation and report it as terminal (#5437) Evidence for this change
- guard: Review in-place sed of a runnable file on Windows (#5414) Evidence for this change
- pretool: Read a missing path in a registered worktree quietly (#5424) Evidence for this change
- extensions: Keep the Extensions page loading after a catalog activation lands (#5438) Evidence for this change
- pretool: Prove an rg listing by the names it can print (#5429) Evidence for this change
- gauntlet: Tell a session started beside a checkout where it really is (#5421) Evidence for this change
- gauntlet: Re-run a case the model never exercised instead of a whole attempt (#5411) Evidence for this change
- pretool: Let a read-only git route to a directory without a repository (#5408) Evidence for this change
- pretool: List a temporary scratch directory the way its owner sees it (#5432) Evidence for this change
- runtime: Keep a cancelled Bash launch's reply deliverable on Windows (#5428) Evidence for this change
- contained: Accept a venv link into the macOS developer directory (#5425) Evidence for this change
- runtime: Keep a journaled receipt when the store is briefly locked (#5415) Evidence for this change
- A failed store write puts the record at the back of the queue and waits with capped exponential backoff (50 ms doubling to 1 s). The wait releases the writer state, so new submissions keep queueing, and a stop cuts it… Evidence for this change
- A journaled record is removed only when a write succeeds or is deduplicated. If a stop runs out of drain time, the record stays in the journal for the next writer, and replay stays idempotent (
receipt_seenplus… Evidence for this change receipt_droppednow counts only real drops: a full queue, an invalid receipt or a journal append failure. Every failed attempt still setsfailures/receipt_failuresand marks the writer degraded. Evidence for this change
Other changes
4- Documented change: Guard 3.52.0a1 is an opt-in prerelease cut from
3c3d1ad. Stable installations remain on the stable channel. 21 commits • 21 merged pull requests • 1 contributor since Guard 3.51.0. Evidence for this change - ci: Extend nextest archive caching to command and core partitions (#5423) Evidence for this change
- containment: Prove the bubblewrap status channel and the executable digest in Rust (#5436) Evidence for this change
- nightly: Give the extension builder and macOS wheel builds room to finish (#5433) Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.51.0a1
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.