Documented changes
12 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.23.0 is a stable release published 2026-10-04. Upstream documents: Guard 3.23.0 is a stable release cut from [`a3067d0`](https://github.com/hashgraph-online/hol-guard/commit/a3067d01bd64413df202f67ff608bc965bd0597e). **5 commits • 3 merged pull requests • 3 contributors** since [Guard 3.22.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.22.0). Its comparison base is v3.22.0. Attribution for this release is being verified.
Changes
Added
4- **native**: Prove bounded git worktree creation ([#3502](https://github.com/hashgraph-online/hol-guard/pull/3502)) Evidence for: **native**: Prove bounded git worktree creation ([#3502](https://github.com/hashgraph-online/hol-guard/pull/3502))
- Add a narrowly bounded native authority proof for routine local `git worktree add` with a fresh contained destination, a new branch, and an existing local ref. Evidence for: Add a narrowly bounded native authority proof for routine local `git worktree add` with a fresh contained destination, a new branch, and an existing local ref.
- Keep forced, dynamic, filter/config/helper, hook, symlink, and other unproven routes on the existing review path; disabled Git permissions continue to hard-deny before execution. Evidence for: Keep forced, dynamic, filter/config/helper, hook, symlink, and other unproven routes on the existing review path; disabled Git permissions continue to hard-deny before execution.
- Preserve per-segment compound validation for bounded `cd` and trusted output consumers, scope credential-helper checks by Git configuration scope, and reuse the acknowledged resident runtime status without changing… Evidence for: Preserve per-segment compound validation for bounded `cd` and trusted output consumers, scope credential-helper checks by Git configuration scope, and reuse the acknowledged resident runtime status without changing…
Fixed
6- **native**: Allow bounded directory reads in agent workflows ([`9dc21be`](https://github.com/hashgraph-online/hol-guard/commit/9dc21be38d4266faf197a474e0f9f5dc50e1577f)) Evidence for: **native**: Allow bounded directory reads in agent workflows ([`9dc21be`](https://github.com/hashgraph-online/hol-guard/commit/9dc21be38d4266faf197a474e0f9f5dc50e1577f))
- **gauntlet**: Preserve owned cleanup proof after timeout ([#3526](https://github.com/hashgraph-online/hol-guard/pull/3526)) Evidence for: **gauntlet**: Preserve owned cleanup proof after timeout ([#3526](https://github.com/hashgraph-online/hol-guard/pull/3526))
- Retry authenticated Guard daemon completion when a bounded stop call is interrupted after shutdown has been requested. Evidence for: Retry authenticated Guard daemon completion when a bounded stop call is interrupted after shutdown has been requested.
- Retry native-resident cleanup within the existing deadline while preserving fail-closed containment. Evidence for: Retry native-resident cleanup within the existing deadline while preserving fail-closed containment.
- Add focused regressions for timeout recovery, strict refusal, and transient resident cleanup. Evidence for: Add focused regressions for timeout recovery, strict refusal, and transient resident cleanup.
- **ci**: Parallelize required Rust checks and correct PR fixture attribution ([#3524](https://github.com/hashgraph-online/hol-guard/pull/3524)) Evidence for: **ci**: Parallelize required Rust checks and correct PR fixture attribution ([#3524](https://github.com/hashgraph-online/hol-guard/pull/3524))
Other changes
2- Documented change: Guard 3.23.0 is a stable release cut from [`a3067d0`](https://github.com/hashgraph-online/hol-guard/commit/a3067d01bd64413df202f67ff608bc965bd0597e). **5 commits • 3 merged pull requests • 3 contributors** since [Guard 3.22.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.22.0). Evidence for: Documented change: Guard 3.23.0 is a stable release cut from [`a3067d0`](https://github.com/hashgraph-online/hol-guard/commit/a3067d01bd64413df202f67ff608bc965bd0597e). **5 commits • 3 merged pull requests • 3 contributors** since [Guard 3.22.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.22.0).
- **release**: 3.23.0 ([`a3067d0`](https://github.com/hashgraph-online/hol-guard/commit/a3067d01bd64413df202f67ff608bc965bd0597e)) Evidence for: **release**: 3.23.0 ([`a3067d0`](https://github.com/hashgraph-online/hol-guard/commit/a3067d01bd64413df202f67ff608bc965bd0597e))
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: v3.22.0
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.