Coverage contract
HOL Guard harness coverage
Every row is derived from the current commit-pinned support manifest. “Supported” is not shorthand for every action in a harness; event surfaces, fail behavior, limitations, release channel, verification date, expiry, and evidence remain visible together.
The selected channel is ordered first. Rows from the other channel remain rendered below; this filter never hides static coverage data.
| Channel/version | Harness | State | Event surfaces | Approval/fallback/resume | Fail behavior | Limitations | Verified / expires |
|---|---|---|---|---|---|---|---|
stable commit evidence2.2.0 | Codex | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Inline edits without a tool call are outside the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Claude Code | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Background sessions without an active terminal may not surface hook events. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | OpenCode | supported commit evidence | shell, mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Prompt and direct file operations are not universally visible. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | GitHub Copilot CLI | partial commit evidence | shell, prompt commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | VS Code extension-host MCP interception is not claimed. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Cursor | supported commit evidence | shell, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Built-in terminal commands outside an agent session can bypass Guard. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Gemini CLI | partial commit evidence | shell, mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Prompt submission and direct file operations are not universally observable. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Hermes | partial commit evidence | shell, mcp_tool, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Early-access coverage depends on Hermes version. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | OpenClaw | partial commit evidence | mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Shell and prompt events are not currently observable through the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Antigravity | partial commit evidence | mcp_tool, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Shell actions are not currently observable through the Antigravity hook surface. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Kimi Code | supported commit evidence | shell, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Hook crashes or timeouts fail open. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Grok Build | supported commit evidence | shell, prompt, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Hook crashes or timeouts fail open. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Pi | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Package install and update flows occur outside the runtime extension bridge. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | Oh My Pi | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Package install and update flows occur outside the runtime extension bridge. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
stable commit evidence2.2.0 | ZCode | supported commit evidence | shell, prompt, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Inline edits without a tool call are outside the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Codex | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Inline edits without a tool call are outside the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Claude Code | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Background sessions without an active terminal may not surface hook events. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | OpenCode | supported commit evidence | shell, mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Prompt and direct file operations are not universally visible. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | GitHub Copilot CLI | partial commit evidence | shell, prompt commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | VS Code extension-host MCP interception is not claimed. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Cursor | supported commit evidence | shell, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Built-in terminal commands outside an agent session can bypass Guard. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Cline | supported commit evidence | shell, prompt, mcp_tool, file_read, file_write, tool_result, network_request commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | PostToolUse native hooks are observation-only; full output mediation requires the managed plugin transport. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Gemini CLI | partial commit evidence | shell, mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Prompt submission and direct file operations are not universally observable. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Hermes | partial commit evidence | shell, mcp_tool, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Early-access coverage depends on Hermes version. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | OpenClaw | partial commit evidence | mcp_tool commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Shell and prompt events are not currently observable through the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Antigravity | partial commit evidence | mcp_tool, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | surface specific commit evidence | Shell actions are not currently observable through the Antigravity hook surface. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Kimi Code | supported commit evidence | shell, prompt commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Hook crashes or timeouts fail open. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Grok Build | supported commit evidence | shell, prompt, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Hook crashes or timeouts fail open. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Pi | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Package install and update flows occur outside the runtime extension bridge. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | Oh My Pi | supported commit evidence | shell, prompt, mcp_tool, file_read, tool_result commit evidence | native approval: yes commit evidencebrowser fallback: yes resume: yes | surface specific commit evidence | Package install and update flows occur outside the runtime extension bridge. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
alpha commit evidence3.0.0-alpha | ZCode | supported commit evidence | shell, prompt, mcp_tool, file_read commit evidence | native approval: no commit evidencebrowser fallback: yes resume: no | fail open commit evidence | Inline edits without a tool call are outside the contract. commit evidence | 2026-08-08 commit evidenceexpires 2026-09-08 |
Coverage change history
2026-08-08
stable 2.2.0 support contract reviewed
14 harness assertions reviewed from main@b2ef8bff771568adc1ea34d6d152eee542bf3f29; expires 2026-09-08.
source commit2026-08-08
alpha 3.0.0-alpha support contract reviewed
15 harness assertions reviewed from release/3.0@1e8eec71fb71865ca81e8afba9801e052f2936c6; expires 2026-09-08.
source commit2026-08-08
Windsurf → Devin claim review
historical-name/product migration supplied by HOL product owner. Guard support status: unverified. No Devin harness contract exists in current stable or release/3.0 source. Public Guard surfaces must not claim Windsurf or Devin support until a Devin adapter and proof are added.