Release notes
HOL Guard v3.59.0a26
PreviewHOL Guard v3.59.0a26, released October 31, 2026, is a preview release with 1 addition, 4 fixes and 5 other changes across 8 merged pull requests. Highlights: Add the rwxmap command extension; Apply signed team policy on password-protected devices.
1 added · 4 fixed · 5 other
Key facts
- Version
- v3.59.0a26
- Channel
- Preview
- Published
- Previous release
- alpha/v3.59.0a25
- Merged pull requests
- 8
Documented changes
10 typed entries
Verified contributors
2 verified contributors · 10 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.59.0a26 is a preview release published 2026-10-31. Upstream documents: Guard 3.59.0a26 is an opt-in prerelease cut from 43781fe. Stable installations remain on the stable channel. 9 commits • 8 merged pull requests • 2 contributors since Guard 3.59.0a25. Its comparison base is alpha/v3.59.0a25. It includes 10 verified contribution deliveries with public evidence links.
Changes
Added
1- extensionsAdd the rwxmap command extension (
ce949cd) Evidence for this change
Fixed
4- policyApply signed team policy on password-protected devices (#6711) Evidence for this change
- Nothing was applied or acknowledged.
- The workspace showed the device as pending indefinitely.
hol-guard policy statusshowed no rejection reason.
- commandRead npm's own aliases as the verbs they stand for (#6705) Evidence for this change
- commandRead the coverage render that follows a contained test run (#6699) Evidence for this change
- commandContain truncate like the write it performs (#6692) Evidence for this change
Other changes
5- Guard 3.59.0a26 is an opt-in prerelease cut from
43781fe. Stable installations remain on the stable channel. 9 commits • 8 merged pull requests • 2 contributors since Guard 3.59.0a25. Evidence for this change - sandboxRun Pi and Oh My Pi workspace sandboxes in the native sink (#6704) Evidence for this change
- sandboxRun a git worktree add chain in the native sink (#6702) Evidence for this change
- sandboxRun workspace calls with a home path in the native sink (#6701) Evidence for this change
- guardRecord what the secret-disclosure and false-pause work closed (#6707) Evidence for this change
- Merged pull request #6702: perf(sandbox): run a git worktree add chain in the native sink (#6702)
- Merged pull request #6692: fix(command): contain truncate like the write it performs (#6692)
- Direct commit de15e58d4b1a: Merge remote-tracking branch 'origin/main' into repair/pr-6259
- Merged pull request #6699: fix(command): read the coverage render that follows a contained test run (#6699)
- Merged pull request #6705: fix(command): read npm's own aliases as the verbs they stand for (#6705)
- Merged pull request #6711: fix(policy): apply signed team policy on password-protected devices (#6711)
- Merged pull request #6701: perf(sandbox): run workspace calls with a home path in the native sink (#6701)
- Merged pull request #6704: perf(sandbox): run Pi and Oh My Pi workspace sandboxes in the native sink (#6704)
- Merged pull request #6259: feat(extensions): add the rwxmap command extension
- Merged pull request #6707: docs(guard): record what the secret-disclosure and false-pause work closed (#6707)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.59.0a25
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.