Release notes

HOL Guard v3.59.0a18

Preview

HOL Guard v3.59.0a18, released October 30, 2026, is a preview release with 2 improvements, 4 fixes and 2 other changes across 6 merged pull requests. Highlights: Write the local device row through the native store; Retire the Python approval queue reads and resolutions.

Changes since the previous release on this channel: alpha/v3.59.0a17alpha/v3.59.0a18

2 improved · 4 fixed · 2 other

Published Original GitHub release for alpha/v3.59.0a18

Key facts

Version
v3.59.0a18
Channel
Preview
Published
Previous release
alpha/v3.59.0a17
Merged pull requests
6

Documented changes

8 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.59.0a18 is a preview release published 2026-10-30. Upstream documents: Guard 3.59.0a18 is an opt-in prerelease cut from d3c5e6c. Stable installations remain on the stable channel. 7 commits • 6 merged pull requests • 2 contributors since Guard 3.59.0a17. Its comparison base is alpha/v3.59.0a17. Attribution for this release is being verified.

Changes

Improved

2

Fixed

4
  • policyApply Cloud exceptions signed into v2 policy bundles (#6580) Evidence for this change
    • Protocol. A v2 bundle may include cloudExceptions and cloudExceptionsIssuedAt. Both are covered by the bundle signature and kept outside bundleHash, so the exception set can change without a new bundle…
    • Replay. The same bundle may come back with a newer exception set, never an older one or none. At the same issue time it must be the set already accepted: the acceptance checkpoint keeps cloudExceptionsHash, the…
    • Capability. The runtime session advertises policy-bundle-v2-cloud-exceptions.v1, so Guard Cloud can refuse to deliver exceptions to a device that would ignore them.
  • commandRead a Composer script by the name the manifest gives it (#6586) Evidence for this change
  • commandRead a coverage run as the test run it drives (#6599) Evidence for this change
  • commandRead Poetry's reporting flags on both sides of its verb (#6596) Evidence for this change

Other changes

2

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.59.0a17

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Evidence ledger0 credits

No credits are published for this release yet.