Release notes

HOL Guard v3.60.0a71

Preview

HOL Guard v3.60.0a71, released November 11, 2026, is a preview release with 3 additions, 9 fixes and 3 other changes across 14 merged pull requests. Highlights: Let a Guard Cloud allow rule match a command pattern; Run daemon workers and hook audits in the native runtime.

Changes since the previous release on this channel: alpha/v3.60.0a70alpha/v3.60.0a71

3 added · 9 fixed · 3 other

Published Original GitHub release for alpha/v3.60.0a71

Key facts

Version
v3.60.0a71
Channel
Preview
Published
Previous release
alpha/v3.60.0a70
Merged pull requests
14

Documented changes

15 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a71 is a preview release published 2026-11-11. Upstream documents: Guard 3.60.0a71 is an opt-in prerelease cut from 0ffea16. Stable installations remain on the stable channel. 14 commits • 14 merged pull requests • 3 contributors since Guard 3.60.0a70. Its comparison base is alpha/v3.60.0a70. Attribution for this release is being verified.

Changes

Added

3
  • policyLet a Guard Cloud allow rule match a command pattern (#7524) Evidence for this change
  • daemonRun daemon workers and hook audits in the native runtime (#7518) Evidence for this change
    • Now native**
    • Runtime heartbeat: the daemon writes its guard_runtime_state row through a new upsert_runtime_state store op.
    • Idle-shutdown hold: a pending review or a queued review event keeps an idle daemon alive.
  • Add dev-mcp server contribution (#7266) Evidence for this change

Fixed

9
  • guardKeep cargo and rustc version checks quiet with a rustup channel override (#7539) Evidence for this change
  • guardRead staged blobs named by an index-stage revision (#7542) Evidence for this change
  • guardPrint help for the extensions, codebases and context commands (#7531) Evidence for this change
  • dashboardDon't show a disconnected app as Needs repair (#7536) Evidence for this change
  • guardLet a bare launchctl list read the service table (#7530) Evidence for this change
  • cigarKeep doctest steps and test code out of notes that do not need them (#7521) Evidence for this change
  • guardStop renewing a direct-lane ACK another publisher has superseded (#7525) Evidence for this change
  • approvalsClarify external recovery outcomes (#7495) Evidence for this change
    • Clarify that a contained-run authorization failure means no unapproved command ran outside the sandbox.
    • Label doctor output as configured protection posture and explain how to inspect live enforcement health separately.
  • approvalsHonor the global browser preference across harnesses (#7517) Evidence for this change
    • Apply the global “Never open a browser” approval preference to Pi, Oh My Pi, the shared daemon/CLI surface, and Codex’s native browser fallback.
    • Keep explicit user-requested opens available and leave approval decisions unchanged.
    • Check Pi-family settings when opening a page, with a 1.5-second timeout and the existing fallback on failed settings reads.

Other changes

3

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a70

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Evidence ledger0 credits

No credits are published for this release yet.