Non-coverage contract
What HOL Guard does not claim to cover
Guard coverage is harness-, version-, and event-specific. This page makes fail-open behavior and observable blind spots first-class public facts instead of allowing “supported” to imply universal protection.
Global coverage boundaries
Category non-claims
- traditional endpoint antivirus
- universal model-level prompt-injection filter
- replacement for SCA or dependency scanning
- support for every action in every harness
Channel limitations
- stable: Coverage is harness- and event-specific.
- stable: Scanning and runtime interception are separate controls.
- stable: Guard does not claim universal model-level prompt filtering.
- alpha: Alpha capabilities must be labeled alpha on public pages.
- alpha: Coverage is harness- and event-specific.
- alpha: Guard does not claim universal model-level prompt filtering.
Fail-open, crash, timeout, and blind-spot facts
These facts are derived from the same commit-pinned support contract used by the coverage table.
| Channel | Harness | Fail behavior | Known boundary | Evidence |
|---|---|---|---|---|
| stable | Codex | surface specific | Inline edits without a tool call are outside the contract. | source commit |
| stable | Claude Code | surface specific | Background sessions without an active terminal may not surface hook events. | source commit |
| stable | OpenCode | surface specific | Prompt and direct file operations are not universally visible. | source commit |
| stable | GitHub Copilot CLI | surface specific | VS Code extension-host MCP interception is not claimed. | source commit |
| stable | Cursor | surface specific | Built-in terminal commands outside an agent session can bypass Guard. | source commit |
| stable | Gemini CLI | surface specific | Prompt submission and direct file operations are not universally observable. | source commit |
| stable | Hermes | surface specific | Early-access coverage depends on Hermes version. | source commit |
| stable | OpenClaw | surface specific | Shell and prompt events are not currently observable through the contract. | source commit |
| stable | Antigravity | surface specific | Shell actions are not currently observable through the Antigravity hook surface. | source commit |
| stable | Kimi Code | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| stable | Kimi Code | fail open | Hook crashes or timeouts fail open. | source commit |
| stable | Grok Build | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| stable | Grok Build | fail open | Hook crashes or timeouts fail open. | source commit |
| stable | Pi | surface specific | Package install and update flows occur outside the runtime extension bridge. | source commit |
| stable | Oh My Pi | surface specific | Package install and update flows occur outside the runtime extension bridge. | source commit |
| stable | ZCode | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| stable | ZCode | fail open | Inline edits without a tool call are outside the contract. | source commit |
| alpha | Codex | surface specific | Inline edits without a tool call are outside the contract. | source commit |
| alpha | Claude Code | surface specific | Background sessions without an active terminal may not surface hook events. | source commit |
| alpha | OpenCode | surface specific | Prompt and direct file operations are not universally visible. | source commit |
| alpha | GitHub Copilot CLI | surface specific | VS Code extension-host MCP interception is not claimed. | source commit |
| alpha | Cursor | surface specific | Built-in terminal commands outside an agent session can bypass Guard. | source commit |
| alpha | Cline | surface specific | PostToolUse native hooks are observation-only; full output mediation requires the managed plugin transport. | source commit |
| alpha | Gemini CLI | surface specific | Prompt submission and direct file operations are not universally observable. | source commit |
| alpha | Hermes | surface specific | Early-access coverage depends on Hermes version. | source commit |
| alpha | OpenClaw | surface specific | Shell and prompt events are not currently observable through the contract. | source commit |
| alpha | Antigravity | surface specific | Shell actions are not currently observable through the Antigravity hook surface. | source commit |
| alpha | Kimi Code | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| alpha | Kimi Code | fail open | Hook crashes or timeouts fail open. | source commit |
| alpha | Grok Build | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| alpha | Grok Build | fail open | Hook crashes or timeouts fail open. | source commit |
| alpha | Pi | surface specific | Package install and update flows occur outside the runtime extension bridge. | source commit |
| alpha | Oh My Pi | surface specific | Package install and update flows occur outside the runtime extension bridge. | source commit |
| alpha | ZCode | fail open | The pinned support contract marks this adapter fail-open; a hook failure must not be described as fail-closed protection. | source commit |
| alpha | ZCode | fail open | Inline edits without a tool call are outside the contract. | source commit |
How to interpret a gap
A partial or unsupported surface means the public evidence does not justify describing that action as protected. It does not mean the harness is unsafe, and it does not mean another control cannot cover the gap. Coverage changes must update the commit-pinned support manifest before this page or comparison content can claim the new behavior.