Issues

• [bug] Desktop app exits about 20 s after a core update or update check, leaving the Guard daemon running

  hashgraph-online/hol-guard#5046 · Filter by author Vyeche opened on Oct 17, 2026

• Safe-alternative mode: after the user approves, resume the Oh My Pi agent with the exact original tool call

  hashgraph-online/hol-guard#4987 · Filter by author Vyeche opened on Oct 16, 2026
  1

  

• Warn in App coverage when an installed harness version is outside the versions Guard is tested against

  hashgraph-online/hol-guard#4974 · Filter by author Vyeche opened on Oct 16, 2026
  

• [bug] bun shim reviews running a script as an install when an argument mentions one

  hashgraph-online/hol-guard#4833 · Filter by author Vyeche opened on Oct 16, 2026
  3

• Gauntlet: bump the pinned Oh My Pi SDK from 18.4.12

  hashgraph-online/hol-guard#4820 · Filter by author Vyeche opened on Oct 16, 2026

• [bug] Package requests under require-reapproval offer workspace/publisher/harness approvals that the retry always rejects

  hashgraph-online/hol-guard#4810 · Filter by author Vyeche opened on Oct 16, 2026
  1

• [bug] Package review messages drop the npm scope (@playwright/test shown as test)

  hashgraph-online/hol-guard#4809 · Filter by author Vyeche opened on Oct 16, 2026
  14

• [bug] "Allow just this once" can never unblock an agent, "Allow every time" is unavailable for git/python, and the page never points to extension patterns

  hashgraph-online/hol-guard#3838 · Filter by author Vyeche opened on Oct 9, 2026
  12

• [bug] Approvals are exact-command only, so a reworded agent retry needs a new approval and the agent reports "still blocked"

  hashgraph-online/hol-guard#3837 · Filter by author Vyeche opened on Oct 9, 2026
  7

• MCP package-launcher contributions match on package name alone

  hashgraph-online/hol-guard#3713 · Filter by author zerocodefast opened on Oct 7, 2026

• Split the extension claim-notice script and its tests under the 500-line guideline

  hashgraph-online/hol-guard#3710 · Filter by author zerocodefast opened on Oct 7, 2026

• Canonical policy-document compiler rejects valid match fields (packages, domains, paths, etc.)

  hashgraph-online/hol-guard#3667 · Filter by author kantorcodes opened on Oct 6, 2026

• test: two timing-sensitive product tests regressed on main after MCP/archive native migration

  hashgraph-online/hol-guard#3636 · Filter by author zerocodefast opened on Oct 6, 2026
  4

• HARDCODED_SECRET + DANGEROUS_DYNAMIC_EXECUTION: matches in string literals, regex source, and type annotations still false-positive after #3260 / #2975

  hashgraph-online/hol-guard#3531 · Filter by author zaxbysauce opened on Oct 4, 2026
  1

• Native hook resume: renewed allow_once does not mint exact-once authority, resumed PreToolUse stays denied

  hashgraph-online/hol-guard#3418 · Filter by author zerocodefast opened on Oct 2, 2026
  1

• Native hook cutover: fail-closed deny drops require-reapproval requests when hol-guard-runtime absent (release-gate regression)

  hashgraph-online/hol-guard#3414 · Filter by author zerocodefast opened on Oct 2, 2026
  1

• [bug] SHELL_INJECTION_PATTERN reports proximity, not injection — argv calls flagged, execSync(…${x}) missed

  hashgraph-online/hol-guard#3340 · Filter by author avelikiy opened on Oct 1, 2026
  1

• [bug] plugin-scanner flags words containing "sk-" as OpenAI keys — main has the word boundary, the action the released workflows pin does not

  hashgraph-online/hol-guard#3291 · Filter by author Ikalus1988 opened on Sep 30, 2026

• [enhancement] Add AppImage to "releases" section

  enhancement
  hashgraph-online/hol-guard#3286 · Filter by author ivan-hc opened on Sep 30, 2026
  1

• [bug] plugin-scanner: dummy secrets in test files, danger-full-access in docs, and duplicated findings block a clean repository

  bug
  hashgraph-online/hol-guard#3153 · Filter by author totollygeek opened on Sep 28, 2026
  2

• [enhancement] improve ci cd setup

  enhancement
  hashgraph-online/hol-guard#2990 · Filter by author yohimik opened on Sep 18, 2026
  2

• Extension proposal: command.shellroute (shellroute proxy CLI)

  hashgraph-online/hol-guard#2926 · Filter by author cvl opened on Sep 14, 2026
  1

• [extension] Optional Syngraphe repository-context protection

  hashgraph-online/hol-guard#2923 · Filter by author suffro opened on Sep 14, 2026
  1

• [bug] eval regex flags Puppeteer $eval/$$eval and member methods

  hashgraph-online/hol-guard#2913 · Filter by author rasimme opened on Sep 13, 2026
  2

• Extension proposal: command.where-are-we

  hashgraph-online/hol-guard#2822 · Filter by author ngavrish opened on Sep 7, 2026
  1