Release notes

HOL Guard v3.53.0a2

Preview

Published October 21, 2026Original GitHub release for alpha/v3.53.0a2

Documented changes

39 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.53.0a2 is a preview release published 2026-10-21. Upstream documents: Guard 3.53.0a2 is an opt-in prerelease cut from 4d41a60. Stable installations remain on the stable channel. 15 commits • 14 merged pull requests • 7 contributors since Guard 3.53.0a1. Its comparison base is alpha/v3.53.0a1. It includes 20 verified contribution deliveries with public evidence links. Attribution for this release is being ve

Added

dashboard: Lighten the Rules header, style every select, and prove the page end to end (4d41a60) Evidence for this change
guard: Add command.simgit extension (#2930) Evidence for this change
extensions: Add EnvSeal CLI command protection (command.envseal) (#4148) Evidence for this change
mcp: Add AXPilot MCP server contribution (#5431) Evidence for this change
mcp-servers: Add garmin-coach-mcp MCP contribution (#5267) Evidence for this change
guard: Plan saved-approval reuse in the resident (#5475) Evidence for this change

Improved

runtime: Retire the Python executable-flag contract and workspace path guard (#5486) Evidence for this change
hook: Let the resident settle the artifact hook's final action (#5466) Evidence for this change
options: Retire the Python command-option shim (#5467) Evidence for this change
github: Let the native runtime own PR body-file safety (#5470) Evidence for this change
packages: Retire the Python npm source spec parser (#5468) Evidence for this change
hook: Let the resident choose which handlers answer a native hook (#5472) Evidence for this change

Fixed

ci: Keep the merge freeze accurate across check suites and dispatched runs (#5465) Evidence for this change
On #5461, CI's hol-guard / required succeeded after the freeze check run was posted, and the commit's combined result stayed failing. Evidence for this change
On #5451, filter=latest returned both the freeze check run (failure) and the CI run (success), from different suites. Evidence for this change
The hold step read only the newest run overall, so the freeze workflow reported "still passes" errors for pull requests that were in fact blocked. Evidence for this change
native: Apply the Extra careful risk-action floor in Rust (#5473) Evidence for this change

Other changes

Documented change: Guard 3.53.0a2 is an opt-in prerelease cut from 4d41a60. Stable installations remain on the stable channel. 15 commits • 14 merged pull requests • 7 contributors since Guard 3.53.0a1. Evidence for this change
Register google-mcp-universal (Google Ads MCP) (#5152) Evidence for this change
Direct commit 3563e87a4d2c: Merge branch 'main' into extension/command-envseal Evidence for this change
Direct commit 0c7e14c1ddde: Merge remote-tracking branch 'origin/main' into repair/pr-5152 Evidence for this change
Merged pull request #5152: Register google-mcp-universal (Google Ads MCP) (#5152) Evidence for this change
Merged pull request #5472: refactor(hook): let the resident choose which handlers answer a native hook (#5472) Evidence for this change
Merged pull request #5473: fix(native): apply the Extra careful risk-action floor in Rust (#5473) Evidence for this change
Direct commit 6f1c5ab0bacc: Merge branch 'main' into add-garmin-coach-mcp Evidence for this change
Merged pull request #5489: feat(dashboard): lighten the Rules header, style every select, and prove the page end to end Evidence for this change
Merged pull request #5470: refactor(github): let the native runtime own PR body-file safety (#5470) Evidence for this change
Merged pull request #5466: refactor(hook): let the resident settle the artifact hook's final action (#5466) Evidence for this change
Merged pull request #4148: feat(extensions): add command.envseal for EnvSeal CLI v6.2.1 (#4148) Evidence for this change
Merged pull request #5475: feat(guard): plan saved-approval reuse in the resident (#5475) Evidence for this change
Merged pull request #5486: refactor(runtime): retire the Python executable-flag contract and workspace path guard (#5486) Evidence for this change
Direct commit f3cfcfdaeae1: maintainer: merge main; normalize non-contribution paths to main Evidence for this change
Merged pull request #2930: feat(guard): add command.simgit extension (#2930) Evidence for this change
Merged pull request #5267: feat(mcp-servers): add garmin-coach-mcp MCP contribution (#5267) Evidence for this change
Merged pull request #5468: refactor(packages): retire the Python npm source spec parser (#5468) Evidence for this change
Merged pull request #5465: fix(ci): keep the merge freeze accurate across check suites and dispatched runs (#5465) Evidence for this change
Merged pull request #5431: feat(mcp): add AXPilot MCP server contribution (#5431) Evidence for this change
Merged pull request #5467: refactor(options): retire the Python command-option shim (#5467) Evidence for this change
Direct commit e01e963fab47: fix(mcp): declare get_nutrition read tool in garmin-coach-mcp Evidence for this change

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.53.0a1

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.