Release notes
HOL Guard v3.56.0a4
PreviewHOL Guard v3.56.0a4, released October 23, 2026, is a preview release with 52 other changes.
Changes since the previous release on this channel: alpha/v3.56.0a3alpha/v3.56.0a4
52 other
Key facts
- Version
- v3.56.0a4
- Channel
- Preview
- Published
- Previous release
- alpha/v3.56.0a3
Documented changes
52 typed entries
Verified contributors
Credits being verified. Attribution coverage is in progress.
Attribution coverage
attribution in progress; history inventory partial.
Install
Scope
Guard v3.56.0a4 is a preview release published 2026-10-23. Its comparison base is alpha/v3.56.0a3. It includes 52 verified contribution deliveries with public evidence links. Attribution for this release is being verified.
Changes
Other changes
52- Merged pull request #3199: feat(extensions): add golive deployment CLI extension (#3199) Evidence for this change
- Merged pull request #5822: fix(watch): let a per-app Watch release tool output, and keep secrets hidden (#5822) Evidence for this change
- Direct commit 6a4fcb2fcec9: Merge main into add-command-golive-extension — regen-owned artifacts resolve to canonical main Evidence for this change
- Merged pull request #5803: fix(gauntlet): run the git apply check scenario's commands in order (#5803) Evidence for this change
- Merged pull request #5801: fix(native): keep index-only git reset and restore out of review (#5801) Evidence for this change
- Merged pull request #5825: feat(mcp): add figlens MCP server contribution (#5825) Evidence for this change
- Merged pull request #5800: feat(native): hash guard evidence payloads in Rust (#5800) Evidence for this change
- Merged pull request #5824: fix(installed): keep wheel asset paths under the Windows path limit (#5824) Evidence for this change
- Merged pull request #5795: fix(ci): preserve and seed trusted Rust test archives Evidence for this change
- Merged pull request #5639: feat(catalog): register the nuvui MCP server (#5639) Evidence for this change
- Merged pull request #5789: fix(native): read an env prefix the way the shell reads its own (#5789) Evidence for this change
- Merged pull request #5797: perf(cloud): reuse a prepared catalog view from the native cache (#5797) Evidence for this change
- Merged pull request #5813: fix(guard): bind the disconnect revocation proof to its access token (#5813) Evidence for this change
- Merged pull request #5806: perf(native): derive post-tool command texts in the resident (#5806) Evidence for this change
- Merged pull request #5785: fix(native): read the code point an ANSI-C word spells (#5785) Evidence for this change
- Merged pull request #5832: test(native): read a vanished descendant's state as gone, however it vanishes (#5832) Evidence for this change
- Merged pull request #5814: fix(native): keep a sourced file's failure when the workspace sits behind a link (#5814) Evidence for this change
- Merged pull request #5811: fix(native): project commands that open with a bracket or a brace (#5811) Evidence for this change
- Merged pull request #5826: test(contracts): read the pinned bounds list the same way on Windows (#5826) Evidence for this change
- Merged pull request #3055: feat(mcp): add AuthzLoom guard profile (#3055) Evidence for this change
- Direct commit 22f237451a5f: feat(mcp): add AuthzLoom guard profile Evidence for this change
- Merged pull request #5791: fix(native): read
|&as the pipe it is, not a background job (#5791) Evidence for this change - Merged pull request #5818: fix(extensions): let the catalog publication build run again, so the current pointer can advance (#5818) Evidence for this change
- Merged pull request #5809: feat(mcp): add Raw Browser contribution (#5809) Evidence for this change
- Merged pull request #3446: Add external Redpen project verification command source (#3446) Evidence for this change
- Merged pull request #5052: feat(mcp): add Seminara MCP server contribution (#5052) Evidence for this change
- Direct commit 6b8e876e8d5b: Merge branch 'main' into add-mcp-seminara Evidence for this change
- Merged pull request #5798: test(nightly): expect the package review for manager exec on Windows and absorb three load flakes (#5798) Evidence for this change
- Merged pull request #5780: fix(native): refresh Windows saved-state bindings Evidence for this change
- Direct commit e744e5ff389d: Merge branch 'main' into redpen-command-source Evidence for this change
- Merged pull request #5804: refactor(native): capture hook retry lineage in the resident (#5804) Evidence for this change
- Merged pull request #5796: fix(native): read a negated or backgrounded list as the list itself (#5796) Evidence for this change
- Merged pull request #5755: feat(extensions): add opt-in LLMRig command safety coverage (#5755) Evidence for this change
- Merged pull request #5808: perf(native): read a tool call for package intent in one resident request (#5808) Evidence for this change
- Merged pull request #5793: fix(native): read
$(( … ))as the number it is, not a command substitution (#5793) Evidence for this change - Merged pull request #5799: feat(mcp-servers): add MAC Address Lookup MCP contribution (#5799) Evidence for this change
- Merged pull request #5812: fix(native): admit the test predicates that compare their own operands (#5812) Evidence for this change
- Direct commit f3b2ee0da024: Merge branch 'main' into add-nuvui-mcp Evidence for this change
- Merged pull request #5807: fix(native): keep a conditional's expansions when it flattens (#5807) Evidence for this change
- Merged pull request #5819: feat(native): resolve the command shadow plane's rollout controls in Rust (#5819) Evidence for this change
- Direct commit 3d2b01b1d868: maintainer: merge main; normalize non-contribution paths to main Evidence for this change
- Merged pull request #5820: perf(native): store extension allow and coverage hints for reviews the hook lane queues (#5820) Evidence for this change
- Merged pull request #5823: feat(native): queue connector-setup reviews on the direct lane (#5823) Evidence for this change
- Merged pull request #5810: feat(native): read and check trust attestations in Rust (#5810) Evidence for this change
- Merged pull request #5828: test(gauntlet): pair a credential report with the file its subtask read (#5828) Evidence for this change
- Merged pull request #5790: test(redaction): pin the secret masking Python and the runtime each apply (#5790) Evidence for this change
- Direct commit 4ddc328358ed: maintainer: qualify nuvui read-only claim with inherit-state review floor Evidence for this change
- Merged pull request #5794: test(codex): pin the hook shapes both inventories refuse (#5794) Evidence for this change
- Direct commit 2a2c5713afa2: Merge branch 'main' into feat/authzloom-mcp Evidence for this change
- Direct commit 69782d618654: Merge branch 'main' into add-command-golive-extension Evidence for this change
- Direct commit 89ab65cc1f16: Merge main into redpen-command-source Evidence for this change
- Merged pull request #5763: feat(extensions): add command.seatbelt-guard command source (#5763) Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.56.0a3
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.