Release notes
HOL Guard v3.59.0a3
PreviewHOL Guard v3.59.0a3, released October 28, 2026, is a preview release with 3 additions, 1 improvement, 3 fixes and 4 other changes across 10 merged pull requests. Highlights: Make the Supply Chain screen lead with one action; Preview a redacted source export of named workspace files.
3 added · 1 improved · 3 fixed · 4 other
Key facts
- Version
- v3.59.0a3
- Channel
- Preview
- Published
- Previous release
- alpha/v3.59.0a2
- Merged pull requests
- 10
Documented changes
11 typed entries
Verified contributors
Credits being verified. Attribution coverage is unknown.
Attribution coverage
attribution not yet verified; history inventory partial.
Install
Scope
Guard v3.59.0a3 is a preview release published 2026-10-28. Upstream documents: Guard 3.59.0a3 is an opt-in prerelease cut from 5054cd0. Stable installations remain on the stable channel. 11 commits • 11 merged pull requests • 1 contributor since Guard 3.59.0a2. Its comparison base is alpha/v3.59.0a2. Attribution for this release is being verified.
Changes
Added
3- dashboardMake the Supply Chain screen lead with one action (#6323) Evidence for this change
- runtimePreview a redacted source export of named workspace files (#6312) Evidence for this change
- Path handling. Each requested path is root-relative and
/-separated. It is opened one component at a time from a directory handle, with no symlinks followed. Empty, absolute,./.., doubled-slash and backslash… - Exclusions that callers cannot override. Credential stores, key material (
.pem,.key, …) and.env*files are always excluded assensitive. Snapshot policy directories (.git,node_modules, …) are always… - Redaction. Every included file is redacted with the shared secret detector, which replaces each match with
[REDACTED], and the result is scanned again. The file is reported asredaction_failedand the bundle…
- Path handling. Each requested path is root-relative and
- dashboardShow background workspace check freshness on the Audit tab (#6302) Evidence for this change
Improved
1- daemonDerive a native review's exact-action queries in the resident (#6307) Evidence for this change
Fixed
3- guardShow the same app protection status locally as Guard Cloud (#6315) Evidence for this change
- guardKeep an enabled GitHub Allow for gh api calls to a repository named hol-guard (#6317) Evidence for this change
gh api --method POST repos/ /hol-guard/actions/runs/ /approvegh api repos/ /hol-guard/...
- shimsLet the resident alone lift a paused package install (#6320) Evidence for this change
Other changes
4- Guard 3.59.0a3 is an opt-in prerelease cut from
5054cd0. Stable installations remain on the stable channel. 11 commits • 11 merged pull requests • 1 contributor since Guard 3.59.0a2. Evidence for this change - guardAudit every Python verdict site against the native authority invariant (#6301) Evidence for this change
- guardProve the hook path stays off the network (#6311) Evidence for this change
- guardProve the native release gate fails a deliberately slowed hook route (#6310) Evidence for this change
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.59.0a2
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Evidence ledger0 credits
No credits are published for this release yet.