Release notes
HOL Guard v3.59.0a22
PreviewHOL Guard v3.59.0a22, released October 31, 2026, is a preview release with 2 additions, 1 improvement, 14 fixes and 10 other changes across 25 merged pull requests. Highlights: Recognise nine more provider credential formats; Add the HCS Trace command extension.
Changes since the previous release on this channel: alpha/v3.59.0a21alpha/v3.59.0a22
2 added · 1 improved · 14 fixed · 10 other
Key facts
- Version
- v3.59.0a22
- Channel
- Preview
- Published
- Previous release
- alpha/v3.59.0a21
- Merged pull requests
- 25
Documented changes
27 typed entries
Verified contributors
3 verified contributors · 28 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.59.0a22 is a preview release published 2026-10-31. Upstream documents: Guard 3.59.0a22 is an opt-in prerelease cut from db747e7. Stable installations remain on the stable channel. 26 commits • 25 merged pull requests • 2 contributors since Guard 3.59.0a21. Its comparison base is alpha/v3.59.0a21. It includes 28 verified contribution deliveries with public evidence links.
Changes
Added
2- scannerRecognise nine more provider credential formats (#6674) Evidence for this change
- extensionsAdd the HCS Trace command extension (
2df5c68) Evidence for this change
Improved
1- runtimeMove the Muse hook document into the native runtime (#6665) Evidence for this change
Fixed
14- commandRead a branch name as a ref, not a credential word (#6666) Evidence for this change
- commandLet a signal 0 liveness check run in the workspace sandbox (#6677) Evidence for this change
- scannerSkip the Cisco MCP child when it cannot run (#6675) Evidence for this change
- ciWait the same readiness budget on every platform (#6678) Evidence for this change
- runtimeRemember a verified Unix resident runtime by its file identity (#6676) Evidence for this change
- commandAdmit GitHub search bounds in a gh api read (#6667) Evidence for this change
- policyKeep an Evaluate policy from blocking on canonical devices (#6670) Evidence for this change
- commandRead package-manager usage text as the question it is (#6663) Evidence for this change
- commandRead a return the shell takes whatever the work did (#6654) Evidence for this change
- commandRead a subshell group in a loop or branch body (#6662) Evidence for this change
- releaseBuild Desktop Core sidecars for pull request alphas (#6660) Evidence for this change
authorize_macos_core_source.shtakes a new path when an alpha tag is not on main. It requires the publication run id. It then verifies the wheel's provenance withgh attestation verifyagainst the main commit the…- The new
verify_pull_request_alpha_source.pychecks the rest of the chain: - the provenance statement covers this exact wheel and names the dispatched publication run on attempt 1;
- policyCount the whole fleet in policy status (#6661) Evidence for this change
- commandRead an installed program's own launcher path by the program it names (#6652) Evidence for this change
- commandRecognise the credential stores a shell read can reach (#6657) Evidence for this change
Other changes
10- Guard 3.59.0a22 is an opt-in prerelease cut from
db747e7. Stable installations remain on the stable channel. 26 commits • 25 merged pull requests • 2 contributors since Guard 3.59.0a21. Evidence for this change - sandboxProject activated and grouped calls in the native sink (#6673) Evidence for this change
- scannerFind a finding's line by search instead of recounting (#6671) Evidence for this change
- sandboxRun wrapped read-only calls in the native sink (#6664) Evidence for this change
- sandboxRun read-only runs in the native sink on Linux (#6658) Evidence for this change
- guardBring the hardening PRD and TODO up to where the work is (#6669) Evidence for this change
- Keep the test suite off public hosts (#6672) Evidence for this change
- daemonHold the daemon under load and count what it gives back (#6655) Evidence for this change
- commandExpect the projected review for wrapped procedural-memory runs (#6659) Evidence for this change
- depsTake pyasn1 0.6.5 for the ASN.1 denial-of-service fixes (#6668) Evidence for this change
- Merged pull request #6663: fix(command): read package-manager usage text as the question it is (#6663)
- Merged pull request #6664: perf(sandbox): run wrapped read-only calls in the native sink (#6664)
- Merged pull request #6667: fix(command): admit GitHub search bounds in a gh api read (#6667)
- Merged pull request #6665: refactor(runtime): move the Muse hook document into the native runtime (#6665)
- Merged pull request #6656: feat(extensions): add the HCS Trace command extension
- Merged pull request #6671: perf(scanner): find a finding's line by search instead of recounting (#6671)
- Merged pull request #6672: test: keep the test suite off public hosts (#6672)
- Merged pull request #6661: fix(policy): count the whole fleet in policy status (#6661)
- Merged pull request #6675: fix(scanner): skip the Cisco MCP child when it cannot run (#6675)
- Merged pull request #6659: test(command): expect the projected review for wrapped procedural-memory runs (#6659)
- Merged pull request #6658: perf(sandbox): run read-only runs in the native sink on Linux (#6658)
- Merged pull request #6668: chore(deps): take pyasn1 0.6.5 for the ASN.1 denial-of-service fixes (#6668)
- Merged pull request #6676: fix(runtime): remember a verified Unix resident runtime by its file identity (#6676)
- Merged pull request #6677: fix(command): let a signal 0 liveness check run in the workspace sandbox
- Merged pull request #6673: perf(sandbox): project activated and grouped calls in the native sink (#6673)
- Merged pull request #6662: fix(command): read a subshell group in a loop or branch body (#6662)
- Merged pull request #6657: fix(command): recognise the credential stores a shell read can reach (#6657)
- Merged pull request #6669: docs(guard): bring the hardening PRD and TODO up to where the work is (#6669)
- Merged pull request #6660: fix(release): build Desktop Core sidecars for pull request alphas (#6660)
- Direct commit f81bd9de1c3b: Merge remote-tracking branch 'origin/main' into contrib/hcs-trace-6656
- Merged pull request #6666: fix(command): read a branch name as a ref, not a credential word
- Direct commit 7b0d2fd61b50: Add HCS Trace command source
- Merged pull request #6655: test(daemon): hold the daemon under load and count what it gives back (#6655)
- Merged pull request #6670: fix(policy): keep an Evaluate policy from blocking on canonical devices (#6670)
- Merged pull request #6654: fix(command): read a return the shell takes whatever the work did (#6654)
- Merged pull request #6674: feat(scanner): recognise nine more provider credential formats
- Merged pull request #6652: fix(command): read an installed program's own launcher path by the program it names (#6652)
- Merged pull request #6678: fix(ci): wait the same readiness budget on every platform (#6678)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.59.0a21
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.