Documented changes
40 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.54.0 is a stable release published 2026-10-22. Upstream documents: Guard 3.54.0 is a stable release cut from 0d6d839. 49 commits • 49 merged pull requests • 4 contributors since Guard 3.53.0. Attribution for this release is being verified.
Changes
Added
14- mcp: Add obsidian-kanban MCP server contribution and trust binding (#5631) Evidence for this change
- native: Spell the artifact approval key in the resident (#5587) Evidence for this change
- dashboard: Add a Releases tab showing every published version and what it changed (#5588) Evidence for this change
- inventory: Port the serializer half of the inventory redaction seam (#5524) Evidence for this change
- hook: Decide the JSON document's exit status in the native runtime (#5564) Evidence for this change
- extensions: Decide the Extensions allow hint in the native resident (#5591) Evidence for this change
- native: Compute the extension-control semantic preview in the resident (#5573) Evidence for this change
- Adds a
previewquery to the resident's extension-control operation. It returns the semantic preview of replacing the current control layers with proposed ones: per changed local target, the explicit and effective… Evidence for this change - Resolution reuses the resolver command evaluation already runs (
CommandEvaluationsurface, same layer bound), so consequences match enforcement exactly. Evidence for this change daemon/extension_control_semantic_preview.pybecomes glue: it sends the catalog projection and both layer sets, then validates the reply's shape. The preview gets a 15s budget since it resolves every catalog… Evidence for this change- native: Seal the managed-controls activation and publication epoch in the resident (#5572) Evidence for this change
seal_managed_activationvalidates the bundle binding (hash, integer version, workspace, policy payload, target lists), derives the policy revision and control-set metadata, computes the effective projection digest… Evidence for this changeseal_managed_revisionseals the managed publication epoch. Evidence for this changebuild_managed_controls_activation_state,build_managed_controls_revision_stateand their helpers are removed from Python. Evidence for this change
Improved
2- native: Let the resident bind what a prepared Extension control commit repeats (#5616) Evidence for this change
- hook: Hash the claude alias in the resident with the other artifacts (#5617) Evidence for this change
Fixed
23- gauntlet: Judge the two benign native cases by what the host and redactor actually write (#5635) Evidence for this change
- native: Stop charging a requested resident shutdown to the crash-loop budget (#5621) Evidence for this change
- ci: Measure soak RSS growth after the worker pool fills (#5627) Evidence for this change
- catalog: Reuse verified catalog object reads so extension publication meets its deadline (#5622) Evidence for this change
- guard: Hold commands that reach a known-bad host for review (#5557) Evidence for this change
- command: Run a Python package listing inside the workspace sandbox (#5600) Evidence for this change
- dashboard: Ask for a code when an extension save outlives a recent proof (#5597) Evidence for this change
- extensions: Read an installed authoring context through one verified runtime (#5613) Evidence for this change
- dashboard: Ask hol.org for the page of releases it will actually send (#5609) Evidence for this change
- extensions: Keep connector discovery working on a long history (#5596) Evidence for this change
- native: Contain a run whose tool directory sits in an installed package tree (#5593) Evidence for this change
- Clear the macOS and Windows nightly test failures (#5602) Evidence for this change
- catalog: Drop the npx-only flag from the uvx example in the command oracle (#5603) Evidence for this change
- command: Keep pip listings quiet when the session exports XDG_CONFIG_HOME (#5595) Evidence for this change
- hook: The resident hashes the artifact a saved approval is keyed by (#5546) Evidence for this change
- gauntlet: Judge a declared benign exit and a proven contained rerun as the results they are (#5583) Evidence for this change
- command: Keep a write beside a Git listing reviewable instead of blocked (#5585) Evidence for this change
- ci: Pin the Gauntlet image to Node.js 22.23.4 (#5582) Evidence for this change
- Pin the Gauntlet container base image to Node.js 22.23.4. Evidence for this change
- guard: Name the exact approved action on remembered rules (#5576) Evidence for this change
- Oh My Pi one-time approvals rendered as identical "Allow matching guarded actions" rows. Root cause, verified in the live store: those decisions carry a
guard-approval-context:v1:token as their artifact hash instead… Evidence for this change - Native store fix: for context-token decisions, the matcher now joins to the approval resolved at exactly the decision's
updated_atwith the same resolution action (the decision row is written in the same store… Evidence for this change - Python: the
policy_source_contextsrequest now sendsactionandupdated_atalongside the existing fields. Evidence for this change
Other changes
1- Documented change: Guard 3.54.0 is a stable release cut from
0d6d839. 49 commits • 49 merged pull requests • 4 contributors since Guard 3.53.0. Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: v3.53.0
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.