Documented changes
40 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.46.0 is a stable release published 2026-10-15. Upstream documents: Guard 3.46.0 is a stable release cut from [`50c755b`](https://github.com/hashgraph-online/hol-guard/commit/50c755ba3a9da425caa5100b08f84105da4a0d3e). **62 commits • 57 merged pull requests • 7 contributors** since [Guard 3.45.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.45.0). Attribution for this release is being verified.
Changes
Added
25- **pi**: Answer Pi and Oh My Pi hooks through the native runtime ([#4745](https://github.com/hashgraph-online/hol-guard/pull/4745)) Evidence for: **pi**: Answer Pi and Oh My Pi hooks through the native runtime ([#4745](https://github.com/hashgraph-online/hol-guard/pull/4745))
- New `hol-guard-runtime pi-hook-bridge ` command (feature `pi-hook-bridge-v1`). It reads the hook payload on stdin, asks a live resident through `hook_direct` with half of the remaining deadline, and posts… Evidence for: New `hol-guard-runtime pi-hook-bridge ` command (feature `pi-hook-bridge-v1`). It reads the hook payload on stdin, asks a live resident through `hook_direct` with half of the remaining deadline, and posts…
- The generated extension spawns the runtime once per hook when the installed runtime advertises `pi-hook-bridge-v1`. It keeps its loopback request on Windows, when no runtime advertises the feature, or when the runtime… Evidence for: The generated extension spawns the runtime once per hook when the installed runtime advertises `pi-hook-bridge-v1`. It keeps its loopback request on Windows, when no runtime advertises the feature, or when the runtime…
- The CLI decision fallback is removed. If daemon recovery fails, the hook is denied with `daemon_unavailable` ("HOL Guard could not reach its local review service before the deadline. Retry the action."). `daemon… Evidence for: The CLI decision fallback is removed. If daemon recovery fails, the hook is denied with `daemon_unavailable` ("HOL Guard could not reach its local review service before the deadline. Retry the action."). `daemon…
- **runtime**: Route frozen Desktop hooks through the native bridges ([#4739](https://github.com/hashgraph-online/hol-guard/pull/4739)) Evidence for: **runtime**: Route frozen Desktop hooks through the native bridges ([#4739](https://github.com/hashgraph-online/hol-guard/pull/4739))
- Frozen builds publish the bundled native runtime to a content-addressed copy under the Guard home (`native-runtime/ /hol-guard-runtime`). The copy is verified against the runtime's digest, owner-only, a regular… Evidence for: Frozen builds publish the bundled native runtime to a content-addressed copy under the Guard home (`native-runtime/ /hol-guard-runtime`). The copy is verified against the runtime's digest, owner-only, a regular…
- Claude, Codex, Cursor and the bounded harnesses (Grok, Hermes, OpenClaw) emit native bridge hook commands on frozen installs. The bounded and Cursor bridges accept the frozen launcher and recover the daemon through the… Evidence for: Claude, Codex, Cursor and the bounded harnesses (Grok, Hermes, OpenClaw) emit native bridge hook commands on frozen installs. The bounded and Cursor bridges accept the frozen launcher and recover the daemon through the…
- The frozen cold-CLI fallbacks are removed. When no daemon answers, the Claude, Codex, Cursor and bounded bridges fail closed rather than starting a Python evaluator. Evidence for: The frozen cold-CLI fallbacks are removed. When no daemon answers, the Claude, Codex, Cursor and bounded bridges fail closed rather than starting a Python evaluator.
- **mcp**: Add Plim MCP server contribution ([#3372](https://github.com/hashgraph-online/hol-guard/pull/3372)) Evidence for: **mcp**: Add Plim MCP server contribution ([#3372](https://github.com/hashgraph-online/hol-guard/pull/3372))
- **extensions**: Add DataMan command safety extension and fixtures ([#3047](https://github.com/hashgraph-online/hol-guard/pull/3047)) Evidence for: **extensions**: Add DataMan command safety extension and fixtures ([#3047](https://github.com/hashgraph-online/hol-guard/pull/3047))
- **guard-policy**: Author, test and explain policies from the command line ([#4716](https://github.com/hashgraph-online/hol-guard/pull/4716)) Evidence for: **guard-policy**: Author, test and explain policies from the command line ([#4716](https://github.com/hashgraph-online/hol-guard/pull/4716))
- **extensions**: Add MusicContext publisher listing ([#3750](https://github.com/hashgraph-online/hol-guard/pull/3750)) Evidence for: **extensions**: Add MusicContext publisher listing ([#3750](https://github.com/hashgraph-online/hol-guard/pull/3750))
- `contributors`: `AAGAM17` (GitHub ID `69311837`) as author of #3683. Evidence for: `contributors`: `AAGAM17` (GitHub ID `69311837`) as author of #3683.
- `maintainerGithubIds`: `["69311837"]`, the account that authored #3683 and maintains [MusicContext](https://github.com/AAGAM17/MusicContext) upstream. This is the authority-bearing change for review. Evidence for: `maintainerGithubIds`: `["69311837"]`, the account that authored #3683 and maintains [MusicContext](https://github.com/AAGAM17/MusicContext) upstream. This is the authority-bearing change for review.
- `originalContributions`: #3683. `upstream`: the MusicContext repository. Evidence for: `originalContributions`: #3683. `upstream`: the MusicContext repository.
- **extensions**: Protect DigitalOcean doctl operations and reproduce real false-positive shapes in the Gauntlet ([#4694](https://github.com/hashgraph-online/hol-guard/pull/4694)) Evidence for: **extensions**: Protect DigitalOcean doctl operations and reproduce real false-positive shapes in the Gauntlet ([#4694](https://github.com/hashgraph-online/hol-guard/pull/4694))
- **guard**: Write dashboard settings through the native runtime ([#4701](https://github.com/hashgraph-online/hol-guard/pull/4701)) Evidence for: **guard**: Write dashboard settings through the native runtime ([#4701](https://github.com/hashgraph-online/hol-guard/pull/4701))
- Rust reads `config.toml` with the same stable-read checks as `guard-config-load`, validates the payload, composes the managed policy, applies the posture and per-harness changes, and renders the file byte for byte as… Evidence for: Rust reads `config.toml` with the same stable-read checks as `guard-config-load`, validates the payload, composes the managed policy, applies the posture and per-harness changes, and renders the file byte for byte as…
- Python keeps the approval gate, managed-policy resolution, the reload through `guard-config-load`, the policy-mutation notice and the posture timeline events. The native call returns the posture state before the write… Evidence for: Python keeps the approval gate, managed-policy resolution, the reload through `guard-config-load`, the policy-mutation notice and the posture timeline events. The native call returns the posture state before the write…
- Removed: the Python TOML writer and coercion helpers in `config.py`, `config_preset_support.py`, the harness posture patch helpers, the presentation write coercion, and the Python config file reader that nothing calls… Evidence for: Removed: the Python TOML writer and coercion helpers in `config.py`, `config_preset_support.py`, the harness posture patch helpers, the presentation write coercion, and the Python config file reader that nothing calls…
- **guard**: Prepare contained Linux launches in the native runtime ([#4692](https://github.com/hashgraph-online/hol-guard/pull/4692)) Evidence for: **guard**: Prepare contained Linux launches in the native runtime ([#4692](https://github.com/hashgraph-online/hol-guard/pull/4692))
- `rust/crates/guard-runtime/src/restricted_linux_launch/` adds discovery, mapping records and copies, mounts, Landlock, capabilities, socket filter, admission and the launch pipeline. `restricted_pytest_op` routes the… Evidence for: `rust/crates/guard-runtime/src/restricted_linux_launch/` adds discovery, mapping records and copies, mounts, Landlock, capabilities, socket filter, admission and the launch pipeline. `restricted_pytest_op` routes the…
- `guard-command`'s mapping evidence accepts optional `dependency_candidates`: the filenames discovery actually observed, including symlink aliases. Bare DT_NEEDED lookups are limited to those names, then pass the same… Evidence for: `guard-command`'s mapping evidence accepts optional `dependency_candidates`: the filenames discovery actually observed, including symlink aliases. Bare DT_NEEDED lookups are limited to those names, then pass the same…
- `restricted_linux_{elf,entry,landlock,mapping_plan,mappings,namespace,paths}.py` are now thin calls through `native_restricted_linux.py`. Native unavailability raises `LinuxContainmentUnavailableError`, so the launch… Evidence for: `restricted_linux_{elf,entry,landlock,mapping_plan,mappings,namespace,paths}.py` are now thin calls through `native_restricted_linux.py`. Native unavailability raises `LinuxContainmentUnavailableError`, so the launch…
- **runtime**: Answer more hooks in the native bridges instead of running Python ([#4689](https://github.com/hashgraph-online/hol-guard/pull/4689)) Evidence for: **runtime**: Answer more hooks in the native bridges instead of running Python ([#4689](https://github.com/hashgraph-online/hol-guard/pull/4689))
Fixed
14- **guard**: Run relative cd builds and resolved workspace paths without false blocks, and repair nightly native tests ([#4747](https://github.com/hashgraph-online/hol-guard/pull/4747)) Evidence for: **guard**: Run relative cd builds and resolved workspace paths without false blocks, and repair nightly native tests ([#4747](https://github.com/hashgraph-online/hol-guard/pull/4747))
- **policy**: Point the editor modeline at the published schema URL ([#4752](https://github.com/hashgraph-online/hol-guard/pull/4752)) Evidence for: **policy**: Point the editor modeline at the published schema URL ([#4752](https://github.com/hashgraph-online/hol-guard/pull/4752))
- **guard**: Run relative-directory node builds under the workspace sandbox ([#4751](https://github.com/hashgraph-online/hol-guard/pull/4751)) Evidence for: **guard**: Run relative-directory node builds under the workspace sandbox ([#4751](https://github.com/hashgraph-online/hol-guard/pull/4751))
- **guard**: Leave Copilot, Devin and ZCode approval prompts to the harness ([#4742](https://github.com/hashgraph-online/hol-guard/pull/4742)) Evidence for: **guard**: Leave Copilot, Devin and ZCode approval prompts to the harness ([#4742](https://github.com/hashgraph-online/hol-guard/pull/4742))
- **dashboard**: Rank whole-word search matches first and stop matching inside words ([#4741](https://github.com/hashgraph-online/hol-guard/pull/4741)) Evidence for: **dashboard**: Rank whole-word search matches first and stop matching inside words ([#4741](https://github.com/hashgraph-online/hol-guard/pull/4741))
- **guard**: Let routine agent work through and fix the macOS and Windows nightly failures ([#4735](https://github.com/hashgraph-online/hol-guard/pull/4735)) Evidence for: **guard**: Let routine agent work through and fix the macOS and Windows nightly failures ([#4735](https://github.com/hashgraph-online/hol-guard/pull/4735))
- **hooks**: Wait for the restarted daemon before retrying a Claude hook ([#4738](https://github.com/hashgraph-online/hol-guard/pull/4738)) Evidence for: **hooks**: Wait for the restarted daemon before retrying a Claude hook ([#4738](https://github.com/hashgraph-online/hol-guard/pull/4738))
- **guard**: Keep rg and grep reviewed when they can reach hidden secrets ([#4721](https://github.com/hashgraph-online/hol-guard/pull/4721)) Evidence for: **guard**: Keep rg and grep reviewed when they can reach hidden secrets ([#4721](https://github.com/hashgraph-online/hol-guard/pull/4721))
- A `!` rule in an ignore file `rg` honors. `!.env` in a `.ignore`, `.gitignore`, `.rgignore`, `.git/info/exclude` or the global Git excludes file makes `rg -n foo` print `.env` lines. Evidence for: A `!` rule in an ignore file `rg` honors. `!.env` in a `.ignore`, `.gitignore`, `.rgignore`, `.git/info/exclude` or the global Git excludes file makes `rg -n foo` print `.env` lines.
- A file type whose globs name dotfiles. `rg -t sh` includes `.env`, `.bashrc` and `.profile`; `ruby` includes `.irbrc`. Evidence for: A file type whose globs name dotfiles. `rg -t sh` includes `.env`, `.bashrc` and `.profile`; `ruby` includes `.irbrc`.
- An extra ignore file passed with `--ignore-file`, which can carry its own `!` rules. Evidence for: An extra ignore file passed with `--ignore-file`, which can carry its own `!` rules.
- **guard**: Make native lib tests platform-aware and judge NTFS stream spellings on Windows ([#4723](https://github.com/hashgraph-online/hol-guard/pull/4723)) Evidence for: **guard**: Make native lib tests platform-aware and judge NTFS stream spellings on Windows ([#4723](https://github.com/hashgraph-online/hol-guard/pull/4723))
- Native command lib tests follow the host platform. POSIX-only shapes (`2>/dev/null`, `$(pwd)` chains, hooks-path writes, routine directory positives) run on unix only. Windows gets its own path and tokenization… Evidence for: Native command lib tests follow the host platform. POSIX-only shapes (`2>/dev/null`, `$(pwd)` chains, hooks-path writes, routine directory positives) run on unix only. Windows gets its own path and tokenization…
- The content sensitivity test deadline is 300 s so slow nightly runners do not time out. Evidence for: The content sensitivity test deadline is 300 s so slow nightly runners do not time out.
Other changes
1- Documented change: Guard 3.46.0 is a stable release cut from [`50c755b`](https://github.com/hashgraph-online/hol-guard/commit/50c755ba3a9da425caa5100b08f84105da4a0d3e). **62 commits • 57 merged pull requests • 7 contributors** since [Guard 3.45.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.45.0). Evidence for: Documented change: Guard 3.46.0 is a stable release cut from [`50c755b`](https://github.com/hashgraph-online/hol-guard/commit/50c755ba3a9da425caa5100b08f84105da4a0d3e). **62 commits • 57 merged pull requests • 7 contributors** since [Guard 3.45.0](https://github.com/hashgraph-online/hol-guard/releases/tag/v3.45.0).
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: v3.45.0
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.