Release notes

HOL Guard v3.52.0a2

Preview

Published Original GitHub release for alpha/v3.52.0a2

Documented changes

10 typed entries

Verified contributors

Credits being verified. Attribution coverage is unknown.

Attribution coverage

attribution not yet verified; history inventory partial.

Scope

Guard v3.52.0a2 is a preview release published 2026-10-20. Upstream documents: Guard 3.52.0a2 is an opt-in prerelease cut from b99e7da. Stable installations remain on the stable channel. 3 commits • 3 merged pull requests • 1 contributor since Guard 3.52.0a1. Its comparison base is alpha/v3.52.0a1. Attribution for this release is being verified.

Changes

Added

4
  • dashboard: Put remembered rules first on Rules & exceptions with at-a-glance counts, action filters, and bulk removal (#5453) Evidence for this change
  • Rules & exceptions now leads with an "At a glance" strip — rules on this device, rules from Guard Cloud, allow count, block count, and the active protection mode — instead of the Guard Cloud bundle and protection cards… Evidence for this change
  • Each remembered rule states what Guard will do in plain language (for example, "Guard will block … the next time Codex retries this exact action"), and local rules can be selected with checkboxes and removed in bulk… Evidence for this change
  • Allow / Block filter chips with live counts are always visible, a result line ("Showing X of Y remembered rules") appears when filters are active with a one-click "Clear search and filters" recovery, and the empty… Evidence for this change

Fixed

4
  • guard: Surface container extension hints and category icons in inbox (#5439) Evidence for this change
  • Allow an explicitly enabled command.container-runtime permission (command.container-runtime.permission.docker-sensitive) to settle uncertain container-runtime observations (`uncertainty_reasons =… Evidence for this change
  • Handle non-comma, non-range nested brace tokens such as Go templates ({{.Server.Version}}) in expand_brace_globs so docker version --format '{{.Server.Version}}' does not fail closed as a sensitive-file glob… Evidence for this change
  • Admit reviews whose only uncertain observations belong to command.container-runtime into the counterfactual extension allow-hint check (native_review_allow_hint.py and hook_direct_review_request.rs), and compute… Evidence for this change

Other changes

2

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.52.0a1

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Evidence ledger0 credits

No credits are published for this release yet.