Release notes

HOL Guard v3.60.0a5

Preview

HOL Guard v3.60.0a5, released November 5, 2026, is a preview release with 2 additions, 3 improvements, 8 fixes and 1 other change across 13 merged pull requests. Highlights: Measure the paid cost of a long task on Codex and Claude Code; Add a long-task token benchmark for CIGAR with a resumed Codex session.

Changes since the previous release on this channel: alpha/v3.60.0a4alpha/v3.60.0a5

2 added · 3 improved · 8 fixed · 1 other

Published Original GitHub release for alpha/v3.60.0a5

Key facts

Version
v3.60.0a5
Channel
Preview
Published
Previous release
alpha/v3.60.0a4
Merged pull requests
13

Documented changes

14 typed entries

Verified contributors

2 verified contributors · 14 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a5 is a preview release published 2026-11-05. Upstream documents: Guard 3.60.0a5 is an opt-in prerelease cut from 7dfbf8a. Stable installations remain on the stable channel. 13 commits • 13 merged pull requests • 2 contributors since Guard 3.60.0a4. Its comparison base is alpha/v3.60.0a4. It includes 14 verified contribution deliveries with public evidence links.

Changes

Added

2

Improved

3
  • hermesDecide Guard's Hermes hook entries in one native request (#7273) Evidence for this change
  • mcpSelect managed MCP servers in one native request (#7270) Evidence for this change
  • evaluationCheck evaluation profiles and results in the native runtime (#7140) Evidence for this change
    • Merged pull request #7258: feat(bench): add a long-task token benchmark for CIGAR with a resumed Codex session (#7258)
    • Merged pull request #7265: fix(sync): report a dropped policy bundle to Cloud and deliver policy when the catalog step fails (#7265)
    • Merged pull request #7252: fix(command): keep a grouped find piped to xargs reviewable when it silences errors (#7252)
    • Merged pull request #7262: fix(secure-fs): read ordinary project config dotfiles outside a work tree (#7262)
    • Merged pull request #7270: refactor(mcp): select managed MCP servers in one native request (#7270)
    • Merged pull request #7272: feat(bench): measure the paid cost of a long task on Codex and Claude Code (#7272)
    • Merged pull request #7259: fix(contained-pytest): let read-only pytest bind a loopback socket (#7259)
    • Merged pull request #7255: fix(daemon): defer trust state published before the socket binds (#7255)
    • Merged pull request #7253: fix(cigar): retry briefly held files during install cleanup (#7253)
    • Direct commit e0afb95dfa29: test(gauntlet): drive an edit whose file carries an untouched credential line
    • Merged pull request #7169: fix(hook): review a Claude Code edit, not the whole file it replaced (#7169)
    • Merged pull request #7273: refactor(hermes): decide Guard's Hermes hook entries in one native request (#7273)
    • Merged pull request #7254: fix(daemon): answer a busy origin or session check with a retryable 503 (#7254)
    • Merged pull request #7140: refactor(evaluation): check evaluation profiles and results in the native runtime (#7140)

Fixed

8
  • secure-fsRead ordinary project config dotfiles outside a work tree (#7262) Evidence for this change
  • syncReport a dropped policy bundle to Cloud and deliver policy when the catalog step fails (#7265) Evidence for this change
  • contained-pytestLet read-only pytest bind a loopback socket (#7259) Evidence for this change
    • Network denied (the parent): INTERNALERROR above, exit 3.
    • Bind only: 1 passed, 1 warning. listen() fails with EPERM, a host client connecting to the socket times out, and a UDP socket bound to 0.0.0.0 cannot receive a datagram the host sends to it.
    • Bind plus inbound (the first revision of this PR): a host client connects and the sandboxed process reads its data. That is why this revision drops the inbound rule.
  • hookReview a Claude Code edit, not the whole file it replaced (#7169) Evidence for this change
  • daemonDefer trust state published before the socket binds (#7255) Evidence for this change
  • daemonAnswer a busy origin or session check with a retryable 503 (#7254) Evidence for this change
  • cigarRetry briefly held files during install cleanup (#7253) Evidence for this change
  • commandKeep a grouped find piped to xargs reviewable when it silences errors (#7252) Evidence for this change

Other changes

1

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a4

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger14 credits