Release notes

HOL Guard v3.58.0a8

Preview

HOL Guard v3.58.0a8, released October 27, 2026, is a preview release with 153 other changes.

Changes since the previous release on this channel: alpha/v3.58.0a5alpha/v3.58.0a8

153 other

Published Original GitHub release for alpha/v3.58.0a8

Key facts

Version
v3.58.0a8
Channel
Preview
Published
Previous release
alpha/v3.58.0a5

Documented changes

153 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.58.0a8 is a preview release published 2026-10-27. Upstream documents: Verified package assets; registry publication is pending. Its comparison base is alpha/v3.58.0a5. It includes 152 verified contribution deliveries with public evidence links. Attribution for this release is being verified.

Changes

Other changes

153
  • Verified package assets; registry publication is pending. Evidence for this change
  • Merged pull request #6129: refactor(guard): retire the Python MCP Skills check and env wrapper shim (#6129) Evidence for this change
  • Merged pull request #6068: feat(extensions): add the Mori command extension Evidence for this change
  • Merged pull request #6168: refactor(guard): keep only the exact-command validator in the Cloud Review contract adapter (#6168) Evidence for this change
  • Merged pull request #6072: fix(command): read the launcher's own help, posture and delimited inspection without a review (#6072) Evidence for this change
  • Merged pull request #6046: refactor(runtime): provision the policy verifier key through the native runtime (#6046) Evidence for this change
  • Merged pull request #6064: refactor(mcp): route Hermes stdio servers through the native relay (#6064) Evidence for this change
  • Merged pull request #6051: refactor(runtime): render stopped MCP package-lane answers in the resident (#6051) Evidence for this change
  • Merged pull request #6055: feat(mcp): add the keepAwake MCP server Evidence for this change
  • Merged pull request #6169: refactor(codex): move the dead-daemon fast path out of the shipped package (#6169) Evidence for this change
  • Merged pull request #6166: refactor(guard): move test-only managed controls contracts into tests (#6166) Evidence for this change
  • Merged pull request #6042: fix(authority): finish an interrupted control-authority commit on the next read (#6042) Evidence for this change
  • Merged pull request #6034: refactor(guard): write the local CLI command catalog in the resident (#6034) Evidence for this change
  • Merged pull request #6138: refactor(guard): retire the unused Python hook payload normalizer (#6138) Evidence for this change
  • Merged pull request #6140: refactor(guard): retire the Python prepared and executed Bash reply checks (#6140) Evidence for this change
  • Merged pull request #6083: fix(guard): reconcile hook launchers that run another install's Python or an older runtime (#6083) Evidence for this change
  • Merged pull request #6049: refactor(runtime): resolve Guard risk actions and synced policy natively (#6049) Evidence for this change
  • Merged pull request #5235: feat(extensions): add the agent-gauntlet command extension Evidence for this change
  • Merged pull request #6134: refactor(guard): retire the unused Python hook-route client (#6134) Evidence for this change
  • Merged pull request #6089: fix(extensions): let two clients prepare the same catalog at once (#6089) Evidence for this change
  • Merged pull request #6091: feat(plugin): say how to get HOL Guard in the README install block and explain a missing native runtime (#6091) Evidence for this change
  • Merged pull request #6147: refactor(guard): move the launch-evidence client into the test helpers (#6147) Evidence for this change
  • Merged pull request #6145: fix(guard): stop holding a pack because another compiler wrote its security root (#6145) Evidence for this change
  • Merged pull request #5940: fix(cli): explain native runtime installation requirements (#5940) Evidence for this change
  • Merged pull request #6079: feat(runtime): verify Guard Cloud command capabilities in the runtime (#6079) Evidence for this change
  • Merged pull request #6022: fix(runtime): keep enforcing when an abandoned prepare sits above the authority head (#6022) Evidence for this change
  • Merged pull request #6117: refactor(guard): retire the unused Python command shadow builder (#6117) Evidence for this change
  • Merged pull request #6071: feat(guard): count why the Grok bridge hands a hook to the daemon (#6071) Evidence for this change
  • Merged pull request #6157: refactor(guard): move test-only setup helpers out of the runtime (#6157) Evidence for this change
  • Merged pull request #6123: refactor(guard): retire the Python Composio discovery and workflow parsers (#6123) Evidence for this change
  • Merged pull request #6045: fix(runtime): keep the recovery command when a block has no repair page (#6045) Evidence for this change
  • Merged pull request #6101: fix(command): read the removal of a worktree that is already gone as a removal that takes nothing away (#6101) Evidence for this change
  • Merged pull request #6151: refactor(guard): move the shell-helper client into tests (#6151) Evidence for this change
  • Merged pull request #6130: refactor(guard): retire the Python command risk-effects table (#6130) Evidence for this change
  • Direct commit 10050a63ec4e: Merge remote-tracking branch 'origin/main' into repair/pr-5235 Evidence for this change
  • Merged pull request #6093: feat(plugin): stop risky plugin installs, pin both runtimes and run only absolute programs (#6093) Evidence for this change
  • Direct commit c5d70c67c12d: maintainer: merge main; normalize non-contribution paths to main Evidence for this change
  • Merged pull request #6165: refactor(guard): move unwired Linux enforcement reference modules into tests (#6165) Evidence for this change
  • Merged pull request #3921: feat(extensions): add drip command safety extension Evidence for this change
  • Merged pull request #6175: test(workspace): pin that background findings never open approval requests (#6175) Evidence for this change
  • Merged pull request #6073: fix(hooks): render the Claude Code prompt notice in the native edge (#6073) Evidence for this change
  • Merged pull request #6154: refactor(guard): move browser MCP normalize projection to tests (#6154) Evidence for this change
  • Merged pull request #6125: fix(guard): reject unnamed options on fail-secure leading subcommands Evidence for this change
  • Merged pull request #6150: refactor(guard): remove unreferenced guard helpers (#6150) Evidence for this change
  • Merged pull request #6044: refactor(runtime): retire the Python GitHub capability table in favor of the resident's contract (#6044) Evidence for this change
  • Merged pull request #6069: fix(release): publish MCPB checksums that verify next to the download (#6069) Evidence for this change
  • Merged pull request #6061: fix(mcp): launch Desktop MCP proxies through the native relay (#6061) Evidence for this change
  • Merged pull request #6155: refactor(guard): remove probe and status helpers nothing calls (#6155) Evidence for this change
  • Direct commit f7fd778437b5: docs: add HOL Guard sponsorship manifest Evidence for this change
  • Merged pull request #6108: refactor(runtime): drop the unused Python containment request contract (#6108) Evidence for this change
  • Merged pull request #6118: fix(guard): drop workspace findings whose severity, confidence or verdict is not text (#6118) Evidence for this change
  • Merged pull request #6139: refactor(guard): retire hook compose query kinds no caller sends (#6139) Evidence for this change
  • Merged pull request #6078: refactor(mcp): keep observed relay sessions native under ask (#6078) Evidence for this change
  • Merged pull request #6060: fix(release): publish stable releases to the MCP Registry and MCPB (#6060) Evidence for this change
  • Merged pull request #6043: fix(guard): show HOL as the publisher name (#6043) Evidence for this change
  • Merged pull request #3112: feat(extensions): add GiviLoop command controls Evidence for this change
  • Merged pull request #6142: refactor(guard): retire three test-only review and package-script helpers (#6142) Evidence for this change
  • Merged pull request #6127: refactor(guard): retire the unused Python hook enrichment queue (#6127) Evidence for this change
  • Merged pull request #6126: refactor(guard): retire three Python modules that only tests still imported (#6126) Evidence for this change
  • Merged pull request #6070: fix(hooks): repin harness hooks to the current native runtime (#6070) Evidence for this change
  • Merged pull request #6018: fix(command): read a bounded jq filter over a piped read as a read (#6018) Evidence for this change
  • Merged pull request #6066: fix(ci): classify the raw artifact fields helper in the runtime scope (#6066) Evidence for this change
  • Merged pull request #6172: refactor(network): move test-only capability negotiation shapes out of the shipped contract (#6172) Evidence for this change
  • Merged pull request #6161: refactor(guard): move four test-only native wrappers into tests Evidence for this change
  • Merged pull request #5966: feat(extensions): add Astrix command and MCP contributions Evidence for this change
  • Merged pull request #6095: feat(guard): approve a paused package install in the terminal that ran it (#6095) Evidence for this change
  • Merged pull request #6167: refactor(guard): move the extension pack validator into tests (#6167) Evidence for this change
  • Merged pull request #6054: refactor(runtime): decide consumer artifact outcomes in the resident (#6054) Evidence for this change
  • Merged pull request #6067: feat(policy): derive a cached bundle's decision identities in the resident (#6067) Evidence for this change
  • Merged pull request #6143: feat(workspace): flag editor tasks and dev container commands that run on their own (#6143) Evidence for this change
  • Merged pull request #3163: deps(pip): update hatchling requirement from <1.31 to <1.33 Evidence for this change
  • Merged pull request #6110: fix(guard): let a quarantined pack still accept the operator's next prompt (#6110) Evidence for this change
  • Merged pull request #6085: fix(extensions): accept the compare response GitHub actually returns (#6085) Evidence for this change
  • Direct commit f32309b614f1: fix(command.mori): restore fixture boundary coverage Evidence for this change
  • Merged pull request #6086: fix(guard): let the runtime decide which posture governs a harness Evidence for this change
  • Merged pull request #6164: refactor(guard): move unwired network and gVisor reference modules into tests (#6164) Evidence for this change
  • Merged pull request #6153: refactor(guard): move the Python Codex containment route into tests (#6153) Evidence for this change
  • Merged pull request #6144: refactor(guard): move the GitHub CLI classifier client into the tests (#6144) Evidence for this change
  • Merged pull request #6148: refactor(guard): retire the unused isolation status payload builders (#6148) Evidence for this change
  • Merged pull request #6137: perf(daemon): stop re-encoding every hook payload for the scheduler (#6137) Evidence for this change
  • Merged pull request #6102: docs: add HOL Guard sponsorship manifest Evidence for this change
  • Merged pull request #6092: feat(plugin): gate installs on HOL's scan result and pin them to the scanned commit (#6092) Evidence for this change
  • Merged pull request #6088: fix(pretool): read a request for a subagent's output as collecting a result (#6088) Evidence for this change
  • Merged pull request #6050: fix(extensions): publish the drip command descriptor Evidence for this change
  • Merged pull request #6124: refactor(guard): retire the Python shell-structure, interpreter-option and embedded-script shims (#6124) Evidence for this change
  • Merged pull request #6115: refactor(hook): settle a Claude approval answer in one resident transaction (#6115) Evidence for this change
  • Merged pull request #3165: deps(actions): bump actions/cache from 4.3.0 to 6.1.0 Evidence for this change
  • Merged pull request #6063: refactor(store): read the local CLI inventory from the resident (#6063) Evidence for this change
  • Merged pull request #6119: refactor(guard): remove Python helpers nothing calls Evidence for this change
  • Merged pull request #6132: refactor(guard): retire the Python Claude bridge's dead response helpers (#6132) Evidence for this change
  • Merged pull request #6136: refactor(guard): retire the unused Python local CLI grant client (#6136) Evidence for this change
  • Direct commit 496c6e288581: Merge branch 'main' into add-agent-gauntlet-command-source Evidence for this change
  • Merged pull request #6105: fix(sync): treat an unreachable Guard Cloud during token refresh as a retryable outage (#6105) Evidence for this change
  • Merged pull request #6109: refactor(hook): delete the CLI pipeline's leftover native edge review (#6109) Evidence for this change
  • Merged pull request #6090: fix(guard): keep saved package approvals valid across feed refreshes and PATH changes (#6090) Evidence for this change
  • Merged pull request #6074: fix(command): read the Guard approval command's own help without a review (#6074) Evidence for this change
  • Merged pull request #6160: refactor(guard): move the request snapshot driver and sync status into tests (#6160) Evidence for this change
  • Merged pull request #6065: refactor(policy): hash a signed v2 bundle's policy payload in the runtime (#6065) Evidence for this change
  • Merged pull request #6159: refactor(guard): retire helpers nothing calls (#6159) Evidence for this change
  • Merged pull request #6035: chore(plugin-release): run plugin releases with Guard 3.58.0a5 (#6035) Evidence for this change
  • Merged pull request #6097: fix(runtime): keep resident auth workers free while requests evaluate (#6097) Evidence for this change
  • Merged pull request #6075: fix(hook): read the daemon's answer to a hol-guard hook call in the native runtime (#6075) Evidence for this change
  • Merged pull request #6008: fix(command): read a package manager's quiet and workspace options as part of its verb Evidence for this change
  • Merged pull request #6080: fix(shims): report cloud coverage as a new login shell sees PATH (#6080) Evidence for this change
  • Merged pull request #6077: fix(command): resolve a relative symlink source the way the kernel does (#6077) Evidence for this change
  • Merged pull request #6056: refactor(hooks): let the resident decide custom extension rules on the daemon path (#6056) Evidence for this change
  • Merged pull request #6120: refactor(guard): remove native shims only tests called (#6120) Evidence for this change
  • Merged pull request #5873: feat(native): read a packaged hook file's identity in the resident (#5873) Evidence for this change
  • Merged pull request #6133: refactor(guard): retire the Python Cursor shell normalizer and state helpers (#6133) Evidence for this change
  • Direct commit c7f7560bc099: Merge branch 'main' into arch Evidence for this change
  • Merged pull request #6041: fix(dashboard): stop asking a connected device to connect Guard Cloud when intel has not synced (#6041) Evidence for this change
  • Merged pull request #6174: refactor(guard): move the single-receipt sync payload and risk report verifier into tests Evidence for this change
  • Merged pull request #6081: fix(hooks): tell the daemon why the resident missed a hook (#6081) Evidence for this change
  • Merged pull request #6082: feat(guard): check GitHub Actions workflows in workspace assessments (#6082) Evidence for this change
  • Merged pull request #6057: fix(release): publish a main alpha when plugin-scanner is over the PyPI limit (#6057) Evidence for this change
  • Merged pull request #6062: fix(mcp): decide Composio tool calls in the native relay (#6062) Evidence for this change
  • Merged pull request #6107: refactor(runtime): drop the unused Python package-script evidence builder (#6107) Evidence for this change
  • Merged pull request #6036: refactor(runtime): move the observed-MCP provider and skill reads into the native store (#6036) Evidence for this change
  • Merged pull request #6131: refactor(guard): share one projection across the workspace rule detectors (#6131) Evidence for this change
  • Merged pull request #6113: refactor(review): ask the resident for a daemon-queued connector setup hint (#6113) Evidence for this change
  • Merged pull request #6027: feat(guard): check agent plugin hooks and MCP servers in workspace assessments (#6027) Evidence for this change
  • Merged pull request #6111: refactor(cursor): drop the Python hook's unused native daemon-reply handoff (#6111) Evidence for this change
  • Merged pull request #6076: feat(guard): count why the bounded bridges hand a hook to the daemon (#6076) Evidence for this change
  • Merged pull request #6087: feat(plugin): let plugin install read specs from a test portal (#6087) Evidence for this change
  • Merged pull request #6039: feat(guard): assemble the local CLI inventory in the resident (#6039) Evidence for this change
  • Merged pull request #6141: refactor(guard): retire three Python helpers only tests still called (#6141) Evidence for this change
  • Merged pull request #6163: refactor(guard): move the test-only authoritative decision decoders into tests (#6163) Evidence for this change
  • Merged pull request #6114: fix(guard): let an install take back a policy root admitted under another engine (#6114) Evidence for this change
  • Merged pull request #6173: refactor(cli): move the test-only Claude approval-gate fallback out of the shipped CLI (#6173) Evidence for this change
  • Merged pull request #6037: chore(plugin-release): run plugin releases with Guard 3.58.0a5 (#6037) Evidence for this change
  • Merged pull request #6058: fix(catalog): give Sigstore's trust refresh CA roots in the packaged runtime (#6058) Evidence for this change
  • Merged pull request #6122: refactor(guard): retire the unused outcome receipt builder and command-policy validator (#6122) Evidence for this change
  • Merged pull request #6016: fix(command): let an agent read Guard's own records without an approval (#6016) Evidence for this change
  • Merged pull request #5876: fix(command): decide the protected harness configuration paths natively (#5876) Evidence for this change
  • Merged pull request #6052: feat(runtime): sign workflow capabilities in the native resident (#6052) Evidence for this change
  • Merged pull request #6146: refactor(guard): retire the unused Python resident admission wrapper (#6146) Evidence for this change
  • Direct commit c11f9e725ef8: fix(ci): validate Hatchling 2.5 metadata with Twine 7 Evidence for this change
  • Merged pull request #6053: fix(hooks): name the guard home in the recovery command an authority block offers (#6053) Evidence for this change
  • Merged pull request #6100: fix(runtime): keep the published runtime's resident when an older install asks it to stop (#6100) Evidence for this change
  • Merged pull request #6084: fix(mcp): let the relay decide OpenCode package calls its native prompt approves (#6084) Evidence for this change
  • Merged pull request #6025: feat(guard): reconcile temporary MCP grants in the resident (#6025) Evidence for this change
  • Merged pull request #5857: feat(mcp-servers): add the Arch MCP contribution Evidence for this change
  • Merged pull request #6012: fix(command): resolve a package manager past Guard's own shim before judging containment Evidence for this change
  • Merged pull request #6158: refactor(guard): move the Python command-id resolver into tests (#6158) Evidence for this change
  • Merged pull request #6040: fix(supply-chain): offer a retry when Guard Cloud cannot be reached during sync (#6040) Evidence for this change
  • Merged pull request #6099: fix(adapters): find user-installed CLIs when Guard runs with the desktop launch PATH (#6099) Evidence for this change
  • Merged pull request #5999: fix(command): follow a project lookup up to the workspace root Evidence for this change
  • Merged pull request #6156: fix(workspace): keep earlier findings listed while their detector has not rechecked (#6156) Evidence for this change
  • Merged pull request #5877: fix(native): read a tool response's text in the resident (#5877) Evidence for this change
  • Merged pull request #6094: feat(plugin): make plugin install and uninstall easier to read and recover from (#6094) Evidence for this change
  • Merged pull request #6096: fix(guard): read a harness's target_file as the file an approval is about (#6096) Evidence for this change
  • Merged pull request #5874: fix(native): attribute a package request to the harness that actually ran it (#5874) Evidence for this change
  • Merged pull request #6047: fix(scanner): accept structured Kimi interface metadata (#6047) Evidence for this change

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.58.0a5

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger152 credits