Skip to content

Guard 3.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Aug 08:35
v3.0.0
493e13a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Guard 3.0 — the extension-first managed controls release

Guard 3.0 is the biggest release cycle in HOL Guard's history. It rebuilds the product around an extension-first managed controls model, moves enforcement into a native Rust runtime, and grows the command safety catalog to cover hundreds of destructive cloud operations.

Since 3.0.0 landed on August 27, 2026, the 3.x line has shipped 71 stable releases in nine days (3.0.0 → 3.0.70) carrying 1,294 commits and 400 merged pull requests from 8 contributors, with every release now documenting its own changes.

What's new in 3.x

Extension-first managed controls

  • Managed policy resolver, resident extension policy enforcement, and managed controls activation replace ad-hoc hook configuration with explicit, per-extension authority.
  • Authority enrollment proofs, one-use extension control proofs, and privacy-safe authority event sync keep control decisions attributable and replay-safe.
  • The Extension Control Center and extension-control CLI expose one control per command pattern, with bulk policy controls and search-scoped bulk edits.

Command safety catalog

  • Built-in destructive-operation matrices: 200 AWS operations, 100 gcloud operations, and 100 Azure operations, plus everyday Git porcelain, Laravel Artisan (db:wipe, migrate:fresh, queue flushes, and friends), package managers, and framework CLIs.
  • Custom extensions for local CLIs and pasted commands, with package.json project enrollment and a full-page enroll flow.
  • Community extensions landed for blitcp, Noodle, Probe, repo2nb, and Skill Sunset audits — community extensions stay off until you opt in.

Native Rust runtime

  • A resident Rust runtime owns pre-tool and post-tool authority, backed by a shadow command model and differential CI against the Python evaluator.
  • Native WebAuthn approval authority, bounded identity-bound decision receipts, and an authenticated Windows resident runtime.
  • Version-matched Rust wheels ship inside the Guard wheels, so the native runtime and the Python package always agree.

Protection Center dashboard

  • A novice-first landing experience with a tool map, protection posture (replacing the mode/level matrix), and plain-language module detail.
  • Test Lab for no-execution policy rehearsal, one-sheet protection review with undo, and last-step MFA views.
  • Extensions workspace with search, faceted filters, family grouping, and third-party marks.

Evidence, receipts, and privacy

  • Command activity lifecycle recording with bounded rollups, privacy controls, and dashboard APIs.
  • Privacy-safe local outcome receipts and risk reports; typed execution-assurance receipts; append-only local event storage.
  • Telemetry contracts that keep evidence local by default and Cloud value boundaries explicit.

Containment and execution assurance

  • Deny-by-default OCI runtime adapter, pinned gVisor reference runtime, and fail-closed Kubernetes RuntimeClass adapter.
  • Execution-bound TypeScript containment, verified reads, workspace-write containment, and exact local check containment.
  • Provider self-healing recovery state machine for managed runtimes.

Network and policy authority

  • Canonical policy authority with signed monotonic generations, capability reachability contracts, and process-bound leases with dual evidence.
  • Independent enforcement and observer receipts for coordinated network decisions.

Agents and distribution

  • New integrations: Cline harness, Grok adapter with approval-time tool-call resume, Claude Code marketplace companion, Noodle and Probe protection.
  • Guarded Repository attestation action, native Secrets CLI with staged pre-commit scans, and context-aware leaked secret detection.
  • MCP Registry publishing and MCPB packaging; MDM conformance labs for enterprise deployment.
  • The menu-bar/tray experience moved to the dedicated hashgraph-online/hol-guard-desktop app; Guard Core stays headless and owns enforcement.

By the numbers

Metric 3.x line
Stable releases (3.0.0 → 3.0.70) 71 in 9 days
Commits since 3.0.0 1,294
Merged pull requests 400
Contributors 8
Catalogued destructive cloud operations 400+ (AWS, gcloud, Azure)
Community extensions 5
Rust runtime ~29,000 lines shipped in-wheel

Install

Install this release:

uv tool install "hol-guard[cisco]==3.0.0"

For the newest stable 3.x release:

uv tool install "hol-guard[cisco]"

Changelog

Assets 7
Loading