Documented changes
40 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.43.0 is a stable release published 2026-10-12. Upstream documents: **cli:** resolve Copilot server identities in Rust ([#4235](https://github.com/hashgraph-online/hol-guard/issues/4235)) ([22af1c6](https://github.com/hashgraph-online/hol-guard/commit/22af1c6649e2329f4384e4a1a60b8e986d6856df)) Attribution for this release is being verified.
Changes
Added
40- **cli:** resolve Copilot server identities in Rust ([#4235](https://github.com/hashgraph-online/hol-guard/issues/4235)) ([22af1c6](https://github.com/hashgraph-online/hol-guard/commit/22af1c6649e2329f4384e4a1a60b8e986d6856df)) Evidence for: **cli:** resolve Copilot server identities in Rust ([#4235](https://github.com/hashgraph-online/hol-guard/issues/4235)) ([22af1c6](https://github.com/hashgraph-online/hol-guard/commit/22af1c6649e2329f4384e4a1a60b8e986d6856df))
- **guard:** acquire restricted archives in the native resident ([#4101](https://github.com/hashgraph-online/hol-guard/issues/4101)) ([4090b17](https://github.com/hashgraph-online/hol-guard/commit/4090b17d122ed938956b5c414acb83eedb3afdd3)) Evidence for: **guard:** acquire restricted archives in the native resident ([#4101](https://github.com/hashgraph-online/hol-guard/issues/4101)) ([4090b17](https://github.com/hashgraph-online/hol-guard/commit/4090b17d122ed938956b5c414acb83eedb3afdd3))
- **guard:** add hol-guard repair and step-up gated hook removal ([#3956](https://github.com/hashgraph-online/hol-guard/issues/3956)) ([6258ae0](https://github.com/hashgraph-online/hol-guard/commit/6258ae05284a106acd6ad813921f8449322a0634)) Evidence for: **guard:** add hol-guard repair and step-up gated hook removal ([#3956](https://github.com/hashgraph-online/hol-guard/issues/3956)) ([6258ae0](https://github.com/hashgraph-online/hol-guard/commit/6258ae05284a106acd6ad813921f8449322a0634))
- **guard:** build hook approval-context tokens in the native runtime ([#4223](https://github.com/hashgraph-online/hol-guard/issues/4223)) ([da75713](https://github.com/hashgraph-online/hol-guard/commit/da757133b7093a52862b558621dd40a11a761c91)) Evidence for: **guard:** build hook approval-context tokens in the native runtime ([#4223](https://github.com/hashgraph-online/hol-guard/issues/4223)) ([da75713](https://github.com/hashgraph-online/hol-guard/commit/da757133b7093a52862b558621dd40a11a761c91))
- **guard:** build the MCP tool-call artifact and approval hash in the native resident ([#4234](https://github.com/hashgraph-online/hol-guard/issues/4234)) ([be91b4b](https://github.com/hashgraph-online/hol-guard/commit/be91b4b3c5aa55ebe82cd7f6c33e38f69ec6a684)) Evidence for: **guard:** build the MCP tool-call artifact and approval hash in the native resident ([#4234](https://github.com/hashgraph-online/hol-guard/issues/4234)) ([be91b4b](https://github.com/hashgraph-online/hol-guard/commit/be91b4b3c5aa55ebe82cd7f6c33e38f69ec6a684))
- **guard:** build workspace scan targets in the native resident ([#4048](https://github.com/hashgraph-online/hol-guard/issues/4048)) ([e5e66ee](https://github.com/hashgraph-online/hol-guard/commit/e5e66ee5340dd615ceab2047422ec4a10b6bc176)) Evidence for: **guard:** build workspace scan targets in the native resident ([#4048](https://github.com/hashgraph-online/hol-guard/issues/4048)) ([e5e66ee](https://github.com/hashgraph-online/hol-guard/commit/e5e66ee5340dd615ceab2047422ec4a10b6bc176))
- **guard:** classify sensitive file read and write requests in Rust ([#4073](https://github.com/hashgraph-online/hol-guard/issues/4073)) ([c9ab19e](https://github.com/hashgraph-online/hol-guard/commit/c9ab19ec9ab66626f71bb069e959ccd1c8f7e78a)) Evidence for: **guard:** classify sensitive file read and write requests in Rust ([#4073](https://github.com/hashgraph-online/hol-guard/issues/4073)) ([c9ab19e](https://github.com/hashgraph-online/hol-guard/commit/c9ab19ec9ab66626f71bb069e959ccd1c8f7e78a))
- **guard:** compile observed MCP tool actions in the guard store resident ([#4159](https://github.com/hashgraph-online/hol-guard/issues/4159)) ([c2a059c](https://github.com/hashgraph-online/hol-guard/commit/c2a059c3dfc28f1c65338094bbe5fefac9102b7b)) Evidence for: **guard:** compile observed MCP tool actions in the guard store resident ([#4159](https://github.com/hashgraph-online/hol-guard/issues/4159)) ([c2a059c](https://github.com/hashgraph-online/hol-guard/commit/c2a059c3dfc28f1c65338094bbe5fefac9102b7b))
- **guard:** consume native-review approvals in the resident store ([#4194](https://github.com/hashgraph-online/hol-guard/issues/4194)) ([0320660](https://github.com/hashgraph-online/hol-guard/commit/0320660063205e4f9209187d0794c94be3d21a8c)) Evidence for: **guard:** consume native-review approvals in the resident store ([#4194](https://github.com/hashgraph-online/hol-guard/issues/4194)) ([0320660](https://github.com/hashgraph-online/hol-guard/commit/0320660063205e4f9209187d0794c94be3d21a8c))
- **guard:** decide approval-reuse claims and miss diagnosis in the resident ([#3962](https://github.com/hashgraph-online/hol-guard/issues/3962)) ([e68d93c](https://github.com/hashgraph-online/hol-guard/commit/e68d93c2bd81c83596f1714c3f658380fda4cbf8)) Evidence for: **guard:** decide approval-reuse claims and miss diagnosis in the resident ([#3962](https://github.com/hashgraph-online/hol-guard/issues/3962)) ([e68d93c](https://github.com/hashgraph-online/hol-guard/commit/e68d93c2bd81c83596f1714c3f658380fda4cbf8))
- **guard:** decide bulk approve-once eligibility in the native resident ([#4020](https://github.com/hashgraph-online/hol-guard/issues/4020)) ([52eb843](https://github.com/hashgraph-online/hol-guard/commit/52eb843f873f249344d578c470a4dad9bf3b49c9)) Evidence for: **guard:** decide bulk approve-once eligibility in the native resident ([#4020](https://github.com/hashgraph-online/hol-guard/issues/4020)) ([52eb843](https://github.com/hashgraph-online/hol-guard/commit/52eb843f873f249344d578c470a4dad9bf3b49c9))
- **guard:** decide Codex tool-output review in the native resident ([#3950](https://github.com/hashgraph-online/hol-guard/issues/3950)) ([dac48ab](https://github.com/hashgraph-online/hol-guard/commit/dac48ab1d4e21b89032f7fa1cdb1dd160ff5a0a4)) Evidence for: **guard:** decide Codex tool-output review in the native resident ([#3950](https://github.com/hashgraph-online/hol-guard/issues/3950)) ([dac48ab](https://github.com/hashgraph-online/hol-guard/commit/dac48ab1d4e21b89032f7fa1cdb1dd160ff5a0a4))
- **guard:** decide daemon lifecycle in the native resident ([#3969](https://github.com/hashgraph-online/hol-guard/issues/3969)) ([8ffeeb3](https://github.com/hashgraph-online/hol-guard/commit/8ffeeb3992afd47c0a321e1989c83e4b732793ea)) Evidence for: **guard:** decide daemon lifecycle in the native resident ([#3969](https://github.com/hashgraph-online/hol-guard/issues/3969)) ([8ffeeb3](https://github.com/hashgraph-online/hol-guard/commit/8ffeeb3992afd47c0a321e1989c83e4b732793ea))
- **guard:** decide daemon route, origin and session policy in the native resident ([#3936](https://github.com/hashgraph-online/hol-guard/issues/3936)) ([3a6c5d1](https://github.com/hashgraph-online/hol-guard/commit/3a6c5d128146b3218f475f2731a8833f73f99e5e)) Evidence for: **guard:** decide daemon route, origin and session policy in the native resident ([#3936](https://github.com/hashgraph-online/hol-guard/issues/3936)) ([3a6c5d1](https://github.com/hashgraph-online/hol-guard/commit/3a6c5d128146b3218f475f2731a8833f73f99e5e))
- **guard:** decide headless app action responses in the native resident ([#3989](https://github.com/hashgraph-online/hol-guard/issues/3989)) ([0c50011](https://github.com/hashgraph-online/hol-guard/commit/0c50011f96b1e883053788c6ad6a98566864f242)) Evidence for: **guard:** decide headless app action responses in the native resident ([#3989](https://github.com/hashgraph-online/hol-guard/issues/3989)) ([0c50011](https://github.com/hashgraph-online/hol-guard/commit/0c50011f96b1e883053788c6ad6a98566864f242))
- **guard:** derive and compose the effective native policy in Rust ([#4127](https://github.com/hashgraph-online/hol-guard/issues/4127)) ([f14d8f1](https://github.com/hashgraph-online/hol-guard/commit/f14d8f1fe604c4fd01b96c24b379b4d1128a88a5)) Evidence for: **guard:** derive and compose the effective native policy in Rust ([#4127](https://github.com/hashgraph-online/hol-guard/issues/4127)) ([f14d8f1](https://github.com/hashgraph-online/hol-guard/commit/f14d8f1fe604c4fd01b96c24b379b4d1128a88a5))
- **guard:** derive approval queue identity in the native resident ([#4001](https://github.com/hashgraph-online/hol-guard/issues/4001)) ([83cafc3](https://github.com/hashgraph-online/hol-guard/commit/83cafc35d37505bee4306d021786e2af22e52a3a)) Evidence for: **guard:** derive approval queue identity in the native resident ([#4001](https://github.com/hashgraph-online/hol-guard/issues/4001)) ([83cafc3](https://github.com/hashgraph-online/hol-guard/commit/83cafc35d37505bee4306d021786e2af22e52a3a))
- **guard:** derive approval scope contracts in the native resident ([#4015](https://github.com/hashgraph-online/hol-guard/issues/4015)) ([352803d](https://github.com/hashgraph-online/hol-guard/commit/352803d4373e8694c1372dd3255983456fe215cd)) Evidence for: **guard:** derive approval scope contracts in the native resident ([#4015](https://github.com/hashgraph-online/hol-guard/issues/4015)) ([352803d](https://github.com/hashgraph-online/hol-guard/commit/352803d4373e8694c1372dd3255983456fe215cd))
- **guard:** derive the local supply-chain posture in the native resident ([#4007](https://github.com/hashgraph-online/hol-guard/issues/4007)) ([66a6fae](https://github.com/hashgraph-online/hol-guard/commit/66a6faec93601108c08bd8e03a666ac549df2ee9)) Evidence for: **guard:** derive the local supply-chain posture in the native resident ([#4007](https://github.com/hashgraph-online/hol-guard/issues/4007)) ([66a6fae](https://github.com/hashgraph-online/hol-guard/commit/66a6faec93601108c08bd8e03a666ac549df2ee9))
- **guard:** derive the workspace dependency inventory in the native resident ([#4027](https://github.com/hashgraph-online/hol-guard/issues/4027)) ([07c5f61](https://github.com/hashgraph-online/hol-guard/commit/07c5f61bce61f3a98e76f2c927dd297ae1b7ebef)) Evidence for: **guard:** derive the workspace dependency inventory in the native resident ([#4027](https://github.com/hashgraph-online/hol-guard/issues/4027)) ([07c5f61](https://github.com/hashgraph-online/hol-guard/commit/07c5f61bce61f3a98e76f2c927dd297ae1b7ebef))
- **guard:** evaluate Cloud-connected package supply chain in the resident ([#3933](https://github.com/hashgraph-online/hol-guard/issues/3933)) ([5fea854](https://github.com/hashgraph-online/hol-guard/commit/5fea8543cbd062b9595b6094a929b0907adf9d28)) Evidence for: **guard:** evaluate Cloud-connected package supply chain in the resident ([#3933](https://github.com/hashgraph-online/hol-guard/issues/3933)) ([5fea854](https://github.com/hashgraph-online/hol-guard/commit/5fea8543cbd062b9595b6094a929b0907adf9d28))
- **guard:** evaluate local package requests in the native resident ([#3987](https://github.com/hashgraph-online/hol-guard/issues/3987)) ([baab299](https://github.com/hashgraph-online/hol-guard/commit/baab2990e14ceabad0fab8f7707abf979d8fcd39)) Evidence for: **guard:** evaluate local package requests in the native resident ([#3987](https://github.com/hashgraph-online/hol-guard/issues/3987)) ([baab299](https://github.com/hashgraph-online/hol-guard/commit/baab2990e14ceabad0fab8f7707abf979d8fcd39))
- **guard:** fold the configured policy action into the native policy_stack query ([#4254](https://github.com/hashgraph-online/hol-guard/issues/4254)) ([90d293e](https://github.com/hashgraph-online/hol-guard/commit/90d293e0be35d2ba2616a88a47482ed1779261f3)) Evidence for: **guard:** fold the configured policy action into the native policy_stack query ([#4254](https://github.com/hashgraph-online/hol-guard/issues/4254)) ([90d293e](https://github.com/hashgraph-online/hol-guard/commit/90d293e0be35d2ba2616a88a47482ed1779261f3))
- **guard:** give per-app protection its own tab and Protect-screen controls ([c9cf0af](https://github.com/hashgraph-online/hol-guard/commit/c9cf0af96c3ec0df0285e9932fb2c17f3f963f42)) Evidence for: **guard:** give per-app protection its own tab and Protect-screen controls ([c9cf0af](https://github.com/hashgraph-online/hol-guard/commit/c9cf0af96c3ec0df0285e9932fb2c17f3f963f42))
- **guard:** identify unlisted local CLIs in the native resident ([#4237](https://github.com/hashgraph-online/hol-guard/issues/4237)) ([33cb25c](https://github.com/hashgraph-online/hol-guard/commit/33cb25c1f5cdc0bb64b263b904e2c8f836be5ad5)) Evidence for: **guard:** identify unlisted local CLIs in the native resident ([#4237](https://github.com/hashgraph-online/hol-guard/issues/4237)) ([33cb25c](https://github.com/hashgraph-online/hol-guard/commit/33cb25c1f5cdc0bb64b263b904e2c8f836be5ad5))
- **guard:** model Windows paths in the native shim admin ([#4232](https://github.com/hashgraph-online/hol-guard/issues/4232)) ([c339d9d](https://github.com/hashgraph-online/hol-guard/commit/c339d9db720c85664f6bbdc08167e5b750a713bc)) Evidence for: **guard:** model Windows paths in the native shim admin ([#4232](https://github.com/hashgraph-online/hol-guard/issues/4232)) ([c339d9d](https://github.com/hashgraph-online/hol-guard/commit/c339d9db720c85664f6bbdc08167e5b750a713bc))
- **guard:** move AIBOM workspace detection to the native resident ([#4207](https://github.com/hashgraph-online/hol-guard/issues/4207)) ([6849601](https://github.com/hashgraph-online/hol-guard/commit/6849601573064a98d60cd2cfb9272f9c33487aff)) Evidence for: **guard:** move AIBOM workspace detection to the native resident ([#4207](https://github.com/hashgraph-online/hol-guard/issues/4207)) ([6849601](https://github.com/hashgraph-online/hol-guard/commit/6849601573064a98d60cd2cfb9272f9c33487aff))
- **guard:** move artifact inventory store writes to the native resident ([#4022](https://github.com/hashgraph-online/hol-guard/issues/4022)) ([d2ecb5f](https://github.com/hashgraph-online/hol-guard/commit/d2ecb5fefdf00ec5c92941ba169e0f4d5d1f5c16)) Evidence for: **guard:** move artifact inventory store writes to the native resident ([#4022](https://github.com/hashgraph-online/hol-guard/issues/4022)) ([d2ecb5f](https://github.com/hashgraph-online/hol-guard/commit/d2ecb5fefdf00ec5c92941ba169e0f4d5d1f5c16))
- **guard:** move Cisco preflight authority to the native resident ([#4042](https://github.com/hashgraph-online/hol-guard/issues/4042)) ([aed675c](https://github.com/hashgraph-online/hol-guard/commit/aed675c118430b38bfd2828c0e21d9985bad28ba)) Evidence for: **guard:** move Cisco preflight authority to the native resident ([#4042](https://github.com/hashgraph-online/hol-guard/issues/4042)) ([aed675c](https://github.com/hashgraph-online/hol-guard/commit/aed675c118430b38bfd2828c0e21d9985bad28ba))
- **guard:** move command-activity store into the native resident ([#3997](https://github.com/hashgraph-online/hol-guard/issues/3997)) ([3813f32](https://github.com/hashgraph-online/hol-guard/commit/3813f321cd140c23f59cd05769573b1fec0e7a39)) Evidence for: **guard:** move command-activity store into the native resident ([#3997](https://github.com/hashgraph-online/hol-guard/issues/3997)) ([3813f32](https://github.com/hashgraph-online/hol-guard/commit/3813f321cd140c23f59cd05769573b1fec0e7a39))
- **guard:** move consumer artifact decision composition to the native runtime ([#4108](https://github.com/hashgraph-online/hol-guard/issues/4108)) ([36f5994](https://github.com/hashgraph-online/hol-guard/commit/36f5994462cf549d2d184b1be3b07a6e8fc1965b)) Evidence for: **guard:** move consumer artifact decision composition to the native runtime ([#4108](https://github.com/hashgraph-online/hol-guard/issues/4108)) ([36f5994](https://github.com/hashgraph-online/hol-guard/commit/36f5994462cf549d2d184b1be3b07a6e8fc1965b))
- **guard:** move direct-tool context authority into the native resident ([#4137](https://github.com/hashgraph-online/hol-guard/issues/4137)) ([3558b3b](https://github.com/hashgraph-online/hol-guard/commit/3558b3bb65afc722ae79e812e26ca28ef56501e6)) Evidence for: **guard:** move direct-tool context authority into the native resident ([#4137](https://github.com/hashgraph-online/hol-guard/issues/4137)) ([3558b3b](https://github.com/hashgraph-online/hol-guard/commit/3558b3bb65afc722ae79e812e26ca28ef56501e6))
- **guard:** move hook payload preparation and the action envelope to the native resident ([#3940](https://github.com/hashgraph-online/hol-guard/issues/3940)) ([b3f185b](https://github.com/hashgraph-online/hol-guard/commit/b3f185b772b3412acc37101744c97197c302fc14)) Evidence for: **guard:** move hook payload preparation and the action envelope to the native resident ([#3940](https://github.com/hashgraph-online/hol-guard/issues/3940)) ([b3f185b](https://github.com/hashgraph-online/hol-guard/commit/b3f185b772b3412acc37101744c97197c302fc14))
- **guard:** move MCP archive binding and package signals into the resident ([#4063](https://github.com/hashgraph-online/hol-guard/issues/4063)) ([94a01c7](https://github.com/hashgraph-online/hol-guard/commit/94a01c7d3e313c00bb951d303865c44761ded957)) Evidence for: **guard:** move MCP archive binding and package signals into the resident ([#4063](https://github.com/hashgraph-online/hol-guard/issues/4063)) ([94a01c7](https://github.com/hashgraph-online/hol-guard/commit/94a01c7d3e313c00bb951d303865c44761ded957))
- **guard:** move package audit projections to the native resident ([#4083](https://github.com/hashgraph-online/hol-guard/issues/4083)) ([4144bb5](https://github.com/hashgraph-online/hol-guard/commit/4144bb556fff0f2c0b24497669b4aa3727f69972)) Evidence for: **guard:** move package audit projections to the native resident ([#4083](https://github.com/hashgraph-online/hol-guard/issues/4083)) ([4144bb5](https://github.com/hashgraph-online/hol-guard/commit/4144bb556fff0f2c0b24497669b4aa3727f69972))
- **guard:** move package execution context build to the native resident ([#4231](https://github.com/hashgraph-online/hol-guard/issues/4231)) ([32cfe23](https://github.com/hashgraph-online/hol-guard/commit/32cfe23f49b697c7542e3d96d4d56d37ac5a7ba5)) Evidence for: **guard:** move package execution context build to the native resident ([#4231](https://github.com/hashgraph-online/hol-guard/issues/4231)) ([32cfe23](https://github.com/hashgraph-online/hol-guard/commit/32cfe23f49b697c7542e3d96d4d56d37ac5a7ba5))
- **guard:** move runner cloud-sync decisions into the native resident ([#3978](https://github.com/hashgraph-online/hol-guard/issues/3978)) ([efeb1c3](https://github.com/hashgraph-online/hol-guard/commit/efeb1c30b1197a8412cb905611f46c9f5c99f7e9)) Evidence for: **guard:** move runner cloud-sync decisions into the native resident ([#3978](https://github.com/hashgraph-online/hol-guard/issues/3978)) ([efeb1c3](https://github.com/hashgraph-online/hol-guard/commit/efeb1c30b1197a8412cb905611f46c9f5c99f7e9))
- **guard:** move session, operation and client-lease store into the native resident ([#4012](https://github.com/hashgraph-online/hol-guard/issues/4012)) ([086110c](https://github.com/hashgraph-online/hol-guard/commit/086110cb6a69b091a7e6a20638b6d7fc7cd2d7bf)) Evidence for: **guard:** move session, operation and client-lease store into the native resident ([#4012](https://github.com/hashgraph-online/hol-guard/issues/4012)) ([086110c](https://github.com/hashgraph-online/hol-guard/commit/086110cb6a69b091a7e6a20638b6d7fc7cd2d7bf))
- **guard:** move signed Claude/Cursor hook authority state to the native resident ([#4113](https://github.com/hashgraph-online/hol-guard/issues/4113)) ([d658157](https://github.com/hashgraph-online/hol-guard/commit/d65815731ad7d2928cfb89e34db861ba46a9ac53)) Evidence for: **guard:** move signed Claude/Cursor hook authority state to the native resident ([#4113](https://github.com/hashgraph-online/hol-guard/issues/4113)) ([d658157](https://github.com/hashgraph-online/hol-guard/commit/d65815731ad7d2928cfb89e34db861ba46a9ac53))
- **guard:** move storage maintenance into the native resident ([#4053](https://github.com/hashgraph-online/hol-guard/issues/4053)) ([00b113e](https://github.com/hashgraph-online/hol-guard/commit/00b113e33931b7b477e6d5fe26dd275a574d3974)) Evidence for: **guard:** move storage maintenance into the native resident ([#4053](https://github.com/hashgraph-online/hol-guard/issues/4053)) ([00b113e](https://github.com/hashgraph-online/hol-guard/commit/00b113e33931b7b477e6d5fe26dd275a574d3974))
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: v3.42.0
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.