Context Guard v0.4.9

Context Guard v0.4.9

Context Guard is a local correctness sidecar for long-running Codex tasks. It
preserves authoritative requirements, revisions, bounded plan state,
delegated-agent provenance, and completion evidence across compaction without
replacing Codex's native task lifecycle.

This is the first public release, built from the validated 0.4.8 runtime
lineage.

Highlights

• Immutable, hash-verified requirement and acceptance ledger.
• Bounded recovery packets for compact/resume workflows.
• Evidence-gated completion with fail-closed state integrity.
• Read-only native plan mirroring and provenance-aware delegated results.
• Redacted handoff export and bounded successor packs.
• Eight lifecycle Hooks with zero third-party runtime dependencies.
• Safe installer that rejects same-version drift and preserves old Hook caches.

0.4.9 fix

The installer now binds every Codex subprocess to the explicit
--codex-home. This prevents an isolated validation run from accidentally
registering a marketplace or plugin in the caller's default Codex home. A
dedicated regression covers the subprocess environment.

Verification

• Local macOS: 82 tests (81 pass, one Windows-only skip), Ruff, repository and
  privacy audits, source/cache parity, idempotent installation, and installed
  lifecycle smoke.
• Native macOS runtime: all eight standalone Hooks individually reviewed and
  trusted; a fresh Codex CLI 0.146.0 task recovered exact requirements after a
  real manual /compact with no file changes and no continuation retry.
• GitHub Actions: all 9 Ubuntu/macOS/Windows jobs passed on Python 3.10, 3.12,
  and 3.13.
• Windows native runtime remains pending; Windows is CI validated, not claimed
  equivalent to the native macOS run.
• Linux evidence is CI plus isolated lifecycle validation only.

See the README,
architecture,
privacy boundary,
and compatibility status.