What's new

• guardian doctor reports a fuller picture of the machine — identity, toolbar state, endpoint protection, and the update queue.

Bug fixes

• A cached policy now stays correctly tied to the organization it belongs to when a device moves to a new one.
• Removing a policy scope can no longer silently fail open.
• A server outage no longer looks like every device losing its credentials — Guardian tells the two apart, and a device backs off instead of retrying a failing server at full speed.
• Uninstalling Guardian from Windows Settings now removes it from every coding agent it was instrumenting.
• Windows hooks reach Claude Code again, and run correctly under both shells Windows can invoke them from.
• Windows terminals render Guardian's colored output as color, instead of showing raw escape codes.
• The toolbar no longer crashes on the MCP and agents screens.
• A machine installed before its organization's tenant existed can now ask for one, instead of being stuck unable to enroll.