Release notes
HOL Guard v3.58.0a9
PreviewHOL Guard v3.58.0a9, released October 27, 2026, is a preview release with 8 additions, 23 improvements, 5 fixes and 7 other changes across 29 merged pull requests. Highlights: Authenticate adapter state in the native runtime; Add the OpenComms command extension.
Changes since the previous release on this channel: alpha/v3.58.0a8alpha/v3.58.0a9
8 added · 23 improved · 5 fixed · 7 other
Key facts
- Version
- v3.58.0a9
- Channel
- Preview
- Published
- Previous release
- alpha/v3.58.0a8
- Merged pull requests
- 29
Documented changes
43 typed entries
Verified contributors
3 verified contributors · 44 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.58.0a9 is a preview release published 2026-10-27. Upstream documents: Guard 3.58.0a9 is an opt-in prerelease cut from 53c45c3. Stable installations remain on the stable channel. 42 commits • 29 merged pull requests • 2 contributors since Guard 3.58.0a8. Its comparison base is alpha/v3.58.0a8. It includes 44 verified contribution deliveries with public evidence links.
Changes
Added
8- runtimeAuthenticate adapter state in the native runtime (#6121) Evidence for this change
- extensionsAdd the OpenComms command extension (
0c210ac) Evidence for this change - runtimeResolve package risk actions inside the native runtime (
927edc8) Evidence for this change - storeResolve an exact cloud review inside the native runtime (
7c6137d) Evidence for this change - guardLet the native runtime verify a supply-chain bundle (
2ab4140) Evidence for this change - runtimeCompose the live Codex allow artifact in the resident (#6103) Evidence for this change
- dashboardShow finding evidence apart from install policy (#6182) Evidence for this change
- extensionsAdd the ShieldEnv command extension (#6177) Evidence for this change
- Add the ShieldEnv command extension for local secret scans, with an external trust binding, the compact public descriptor, and a portable fixture.
- Includes the command source from #6162.
Improved
23- guardMove test-only local CLI, Grok and Copilot wrappers into test support (#6187) Evidence for this change
- guardRender the bounded bridge's daemon answer in the native runtime (#6206) Evidence for this change
- guardMove test-only resident probes into test support and drop dead helpers (#6184) Evidence for this change
- guardRetire dead Python left behind by earlier moves (
fbd3989) Evidence for this change - guardDrop unused AIBOM summary wrappers and the MDM JSON loader (#6204) Evidence for this change
- guardDrop the unused live hook approval copy builder (#6202) Evidence for this change
- guardDrop the Python path-tree fingerprint (#6203) Evidence for this change
- guardRetire dead harness-usage recording and test-only wrappers (#6195) Evidence for this change
- guardMove the test-only approval protocol decoders into test support (#6196) Evidence for this change
- guardDrop the legacy Grok managed-block writer and two dead helpers (#6198) Evidence for this change
- guardDrop the unused Codex browser-wait predicates (#6200) Evidence for this change
- guardDrop dead Codex resume-metadata extraction (#6197) Evidence for this change
- guardMove test-only shims into test support (#6192) Evidence for this change
- guardDrop helpers only the CLI shared module still imported (#6199) Evidence for this change
- guardMove six test-only helpers out of the runtime (#6194) Evidence for this change
- guardMove the sensitive-read client into tests (
c99586b) Evidence for this change - guardMove test-only v1 policy bundle wrappers into test support (#6188) Evidence for this change
- guardMove test-only Codex inspection and snapshot clients into tests (
987c21b) Evidence for this change - guardMove contribution payload loaders into test support (
435b0bd) Evidence for this change - guardMove the test-only network policy model into test support (
1eb22bf) Evidence for this change - guardDrop dead helpers and move test-only ones out of src (#6193) Evidence for this change
- guardRetire the unused hook metrics recorder path and local tool grant lookup (
e0f6793) Evidence for this change - guardMove the test-only policy store wrappers into test support (#6179) Evidence for this change
Fixed
5- releaseKeep published wheels on core metadata PyPI can read (#6201) Evidence for this change
- plugin-kitKeep a Claude Code plugin installed by its declared command (#6176) Evidence for this change
- guardDecide the low registry trust review floor in the native runtime (#6112) Evidence for this change
- cloudDowngrade a sync whose catalog view was evicted instead of failing it (
6677f9d) Evidence for this change - readRead a project's own documents out of its hidden directories (#6104) Evidence for this change
Other changes
7- Guard 3.58.0a9 is an opt-in prerelease cut from
53c45c3. Stable installations remain on the stable channel. 42 commits • 29 merged pull requests • 2 contributors since Guard 3.58.0a8. Evidence for this change - guardPopulate the benign gate from the approval queue's own rows (
807e0fb) Evidence for this change - gauntletReplay each installed-acceptance case through its own hook event (
2a0c8a8) Evidence for this change - gauntletRun the git refresh chains with the git extension allowed (#5974) Evidence for this change
- workspacePin that a hook file which stops parsing keeps its finding open (#6186) Evidence for this change
- workspaceAdmit the carry test's worktree through the test helper (#6190) Evidence for this change
- workspaceAdmit carry-test worktrees through the test support helper (#6189) Evidence for this change
- Direct commit e950a48f5d80: Add OpenComms command extension
- Merged pull request #6198: refactor(guard): drop the legacy Grok managed-block writer and two dead helpers (#6198)
- Merged pull request #6204: refactor(guard): drop unused AIBOM summary wrappers and the MDM JSON loader
- Merged pull request #6196: refactor(guard): move the test-only approval protocol decoders into test support (#6196)
- Merged pull request #6176: fix(plugin-kit): keep a Claude Code plugin installed by its declared command
- Merged pull request #6178: refactor(guard): retire the unused hook metrics recorder path and local tool grant lookup
- Merged pull request #6210: feat(extensions): add the OpenComms command extension
- Merged pull request #6201: fix(release): keep published wheels on core metadata PyPI can read
- Merged pull request #6181: refactor(guard): move the test-only network policy model into test support
- Direct commit a2c036e15f12: feat(extensions): add shieldenv command source extension
- Merged pull request #6207: refactor(guard): retire dead Python left behind by earlier moves
- Merged pull request #6188: refactor(guard): move test-only v1 policy bundle wrappers into test support (#6188)
- Merged pull request #6203: refactor(guard): drop the Python path-tree fingerprint (#6203)
- Merged pull request #6183: refactor(guard): move test-only Codex inspection and snapshot clients into tests
- Merged pull request #6202: refactor(guard): drop the unused live hook approval copy builder
- Merged pull request #6152: refactor(guard): move the sensitive-read client into tests
- Merged pull request #4985: test(guard): populate the benign gate from the approval queue's own rows
- Merged pull request #6179: refactor(guard): move the test-only policy store wrappers into test support (#6179)
- Merged pull request #6190: test(workspace): admit the carry test's worktree through the test helper (#6190)
- Merged pull request #6200: refactor(guard): drop the unused Codex browser-wait predicates (#6200)
- Merged pull request #6197: refactor(guard): drop dead Codex resume-metadata extraction (#6197)
- Merged pull request #6098: feat(store): resolve an exact cloud review inside the native runtime
- Merged pull request #6192: refactor(guard): move test-only shims into test support (#6192)
- Merged pull request #6186: test(workspace): pin that a hook file which stops parsing keeps its finding open (#6186)
- Merged pull request #6191: test(gauntlet): replay each installed-acceptance case through its own hook event
- Merged pull request #6121: feat(runtime): authenticate adapter state in the native runtime
- Merged pull request #6189: test(workspace): admit carry-test worktrees through the test support helper (#6189)
- Merged pull request #6177: feat(extensions): add the ShieldEnv command extension (#6177)
- Merged pull request #6180: fix(cloud): downgrade a sync whose catalog view was evicted instead of failing it
- Merged pull request #6185: refactor(guard): move contribution payload loaders into test support
- Merged pull request #6103: feat(runtime): compose the live Codex allow artifact in the resident (#6103)
- Merged pull request #6104: fix(read): read a project's own documents out of its hidden directories (#6104)
- Merged pull request #5974: test(gauntlet): run the git refresh chains with the git extension allowed (#5974)
- Merged pull request #6149: feat(guard): let the native runtime verify a supply-chain bundle
- Merged pull request #6199: refactor(guard): drop helpers only the CLI shared module still imported (#6199)
- Merged pull request #6106: feat(runtime): resolve package risk actions inside the native runtime
- Merged pull request #6182: feat(dashboard): show finding evidence apart from install policy (#6182)
- Merged pull request #6187: refactor(guard): move test-only local CLI, Grok and Copilot wrappers into test support
- Merged pull request #6206: refactor(guard): render the bounded bridge's daemon answer in the native runtime
- Merged pull request #6184: refactor(guard): move test-only resident probes into test support and drop dead helpers
- Merged pull request #6112: fix(guard): decide the low registry trust review floor in the native runtime
- Merged pull request #6195: refactor(guard): retire dead harness-usage recording and test-only wrappers (#6195)
- Merged pull request #6194: refactor(guard): move six test-only helpers out of the runtime (#6194)
- Merged pull request #6193: refactor(guard): drop dead helpers and move test-only ones out of src (#6193)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.58.0a8
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.