Release notes
HOL Guard v3.58.0a4
PreviewHOL Guard v3.58.0a4, released October 26, 2026, is a preview release with 2 additions, 1 improvement, 2 fixes and 2 other changes across 6 merged pull requests. Highlights: Attest a CycloneDX SBOM and annotate changes since the previous release; Check project agent hooks in background workspace assessments.
2 added · 1 improved · 2 fixed · 2 other
Key facts
- Version
- v3.58.0a4
- Channel
- Preview
- Published
- Previous release
- alpha/v3.58.0a3
- Merged pull requests
- 6
Documented changes
7 typed entries
Verified contributors
1 verified contributor · 6 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.58.0a4 is a preview release published 2026-10-26. Upstream documents: Guard 3.58.0a4 is an opt-in prerelease cut from 96d7a50. Stable installations remain on the stable channel. 6 commits • 6 merged pull requests • 1 contributor since Guard 3.58.0a3. Its comparison base is alpha/v3.58.0a3. It includes 6 verified contribution deliveries with public evidence links.
Changes
Added
2- plugin-releaseAttest a CycloneDX SBOM and annotate changes since the previous release (#6024) Evidence for this change
- guardCheck project agent hooks in background workspace assessments (#6014) Evidence for this change
- The files checked are the ones agents load from the worktree root:
.claude/settings.jsonandsettings.local.json,.codex/hooks.jsonandconfig.toml,.cursor/hooks.json,.gemini/settings.json… - Hooks are read from a
hooksobject keyed by event. Only Devin'shooks.v1.jsonand the Copilot files may instead be keyed by event at the top level, so other top-level lists in a settings file (notify… - The rules live in
guard_command::hook_config_risk, on top of the sharedguard_command::launch_screenthe MCP check uses, so remote code, environment exfiltration and privileged launches are named the same way as in…
- The files checked are the ones agents load from the worktree root:
Improved
1- runtimeResolve risk-class actions in the resident instead of Python (#6017) Evidence for this change
Fixed
2- runtimeAsk the classifier for the contained peel instead of peeling it twice (#6002) Evidence for this change
- dashboardExplain extension policy save failures instead of printing daemon codes (#6019) Evidence for this change
Other changes
2- Guard 3.58.0a4 is an opt-in prerelease cut from
96d7a50. Stable installations remain on the stable channel. 6 commits • 6 merged pull requests • 1 contributor since Guard 3.58.0a3. Evidence for this change - pluginRound-trip plugin install and uninstall through Claude Code and Codex (#6020) Evidence for this change
- Merged pull request #6020: ci(plugin): round-trip plugin install and uninstall through Claude Code and Codex (#6020)
- Merged pull request #6024: feat(plugin-release): attest a CycloneDX SBOM and annotate changes since the previous release (#6024)
- Merged pull request #6017: refactor(runtime): resolve risk-class actions in the resident instead of Python (#6017)
- Merged pull request #6002: fix(runtime): ask the classifier for the contained peel instead of peeling it twice (#6002)
- Merged pull request #6019: fix(dashboard): explain extension policy save failures instead of printing daemon codes (#6019)
- Merged pull request #6014: feat(guard): check project agent hooks in background workspace assessments (#6014)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.58.0a3
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.