Guard 2.2.0

HOL Guard 2.2.0

HOL Guard 2.2 is a major runtime reliability and developer-experience release. It makes Guard substantially more resilient under sustained agent activity, reduces false positives across routine development workflows, strengthens approval integrity, and improves recovery across local harnesses and Guard Cloud.

Highlights

A more resilient Guard runtime

• Keeps the daemon responsive during hook bursts, worker turnover, transport timeouts, authentication rollover, and SQLite contention.
• Recovers automatically from supported SQLite corruption scenarios instead of allowing a damaged local evidence store to disable every protected tool call.
• Adds deadline-aware admission, bounded fallback review, asynchronous diagnostics, late-response rejection, and durable lifecycle evidence.
• Speeds up managed hook startup, streams attachment scans, and tunes the SQLite hot path.
• Refreshes managed harness shims and preserves decisions while daemon recovery is in progress.

Fewer false positives without weakening security

Guard now evaluates more compound commands by their individual effects instead of escalating the entire command because one token is ambiguous.

This release adds bounded handling for common workflows involving:

• Git status, history, fetch, show, checkout, push, and other verified repository operations.
• GitHub pull-request creation, editing, viewing, filtering, checks, logs, and squash merges.
• Bun, Vitest, TypeScript, Python, Perl, sed, find, config inspection, dependency links, and local build diagnostics.
• Bounded source edits, file moves, temporary diagnostic scripts, heredocs, globbed reads, and filtered command output.
• Browser MCP navigation and trusted local CLI tools with scoped, time-limited access.

Guard still requires review for secret and credential access, destructive operations, unsafe links, untrusted runners, unrestricted scans, package operations without adequate evidence, suspicious outbound transfers, and other material remote side effects.

Consistent protection modes and approvals

• Makes Watch only and observe modes non-blocking across supported command and output-review paths.
• Adds scoped, timed grants for trusted local tools and browser MCP servers.
• Reconciles requests already covered by a valid approval and keeps browser access choices inline.
• Preserves exact, one-time, replayed, and bulk approval behavior.
• Requires step-up authentication for protected Guard lifecycle operations.
• Binds remote approvals to nonces and enforces reviewer-role claims.

Guard Cloud and supply-chain recovery

• Improves Guard Cloud sign-in, reconnection, package-safety checks, receipt synchronization, privacy preference synchronization, and redaction recovery.
• Adds conditional trust for verified package scans while retaining review when package identity or safety evidence is unavailable.
• Adds supply-chain fix-all recovery for supported findings.
• Includes Guard version provenance and working-directory context with requests to make local and cloud diagnostics attributable.
• Keeps package reconnect guidance and approval recovery actionable instead of leaving installs in a dead end.

Better dashboard and onboarding UX

• Adds actionable package-safety and Guard Cloud recovery guidance.
• Exposes receipt privacy, alpha-channel, browser-access, and trusted-tool controls.
• Improves request evidence, approval, update, protection-repair, and recovery flows.
• Installs concise safety guidance for supported AI-agent harnesses.
• Simplifies CLI command structure and recovery paths.

Harness coverage

This release strengthens and normalizes Guard integration behavior across Codex, Claude Code, GitHub Copilot CLI, Cursor, Gemini CLI, Kimi Code, Pi / oh-my-pi, and other supported adapters. Enforcement depth still depends on the events exposed by each harness; see the supported-agent matrix for the current contract.

Verification and release engineering

• Adds the persistent 2.2 alpha update channel and validates the stable promotion path.
• Expands deterministic and adversarial command corpora across GitHub, package, cloud, platform, data-flow, encoded-execution, and action-lattice scenarios.
• Adds or strengthens mutation, protected-invariant, suite-size, latency, concurrency, privacy, compatibility, and installed-artifact ratchets.
• Balances pytest shards using measured durations and hardens compatibility jobs.
• Adds a portable MDM compatibility contract lab.

Install or upgrade

New installation:

pipx install hol-guard
hol-guard init

Upgrade an existing pipx installation:

pipx upgrade hol-guard
hol-guard --version

Install the optional Cisco integration with uv:

uv tool install "hol-guard[cisco]==2.2.0"

After upgrading, run hol-guard init to review detected harness integrations and repair any stale managed hooks.

Full changelog

See every change since the previous stable release: v2.1.29...v2.2.0.