Release notes

HOL Guard v3.60.0a77

Preview

HOL Guard v3.60.0a77, released November 12, 2026, is a preview release with 6 additions, 4 fixes and 2 other changes across 10 merged pull requests. Highlights: Add Vericto proxy and account MCP contributions; Ship relaxed, balanced and strict cloud policy presets.

Changes since the previous release on this channel: alpha/v3.60.0a76alpha/v3.60.0a77

6 added · 4 fixed · 2 other

Published Original GitHub release for alpha/v3.60.0a77

Key facts

Version
v3.60.0a77
Channel
Preview
Published
Previous release
alpha/v3.60.0a76
Merged pull requests
10

Documented changes

12 typed entries

Verified contributors

4 verified contributors · 12 credits

View the complete verified roster

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a77 is a preview release published 2026-11-12. Upstream documents: Guard 3.60.0a77 is an opt-in prerelease cut from 90247f1. Stable installations remain on the stable channel. 11 commits • 10 merged pull requests • 3 contributors since Guard 3.60.0a76. Its comparison base is alpha/v3.60.0a76. It includes 12 verified contribution deliveries with public evidence links.

Changes

Added

6
  • mcp-serversAdd Vericto proxy and account MCP contributions (90247f1) Evidence for this change
  • guardShip relaxed, balanced and strict cloud policy presets (#7586) Evidence for this change
    • Presets. contributions/cloud-policy-packs/{relaxed,balanced,strict}.json are policy packs (guard.cloud-policy-pack.v1) compiled into the runtime with include_str! and validated on first use. The loader…
    • Classifier. cloud_action_classifier.rs splits a tool name on separators and camel case, matches verbs and verb-noun pairs (transfer ownership, remove member, api key), and takes the strictest class. An…
    • Fixture decisions. A pack fixture may state expect.decisions for each preset; the fixture runner evaluates the extracted facts against each named preset and fails on any difference. The shipped GitHub, Notion and…
  • guardDescribe cloud actions as reviewable packs (#7585) Evidence for this change
  • guardRun every bounded CLI hook through the native bridge (#7591) Evidence for this change
    • Muse runs natively. That includes the in-hook wait for an approval that a review names. It sits behind its own runtime feature (bounded-hook-bridge-muse-v1), so an older runtime is never registered for Muse.
    • The managed Grok client carries only constants. The runtime reads them and answers the hook. If the client runs on its own, it denies deciding events and leaves observed events alone.
    • The Python fallback modules are removed. The daemon client, recovery, deadline and execution-stamp modules are gone, along with their tests. Rust bridge tests already cover the same daemon, restart and fail-closed…
  • guardInspect cloud action arguments and results for secrets and injection (#7582) Evidence for this change
  • guardDecide cloud actions on facts with version 2 requests (#7583) Evidence for this change

Fixed

4
  • commandKeep Claude Code's PostToolUse run time from voiding the task-metadata proof (#7588) Evidence for this change
  • guardRead a quoted grep or rg pattern as text, not a shell glob (#7592) Evidence for this change
  • guardLet head and tail read several plain files at once (#7590) Evidence for this change
  • guardPlan heredoc commit messages in the workspace sandbox and read OMP eval print (#7584) Evidence for this change
    • Heredoc commit message in the workspace sandbox.** When the local Git write proof cannot settle a commit (for example, a global core.hooksPath points outside the workspace), Guard routes git commit into the…

Other changes

2
  • Guard 3.60.0a77 is an opt-in prerelease cut from 90247f1. Stable installations remain on the stable channel. 11 commits • 10 merged pull requests • 3 contributors since Guard 3.60.0a76. Evidence for this change
  • gauntletGive the remote-URL scenario a checkout with a remote (#7596) Evidence for this change
    • Merged pull request #7601: feat(mcp-servers): add Vericto proxy and account MCP contributions
    • Merged pull request #7588: fix(command): keep Claude Code's PostToolUse run time from voiding the task-metadata proof (#7588)
    • Direct commit 8c437a42441b: fix(guard): plan heredoc commit messages in the workspace sandbox and read OMP eval print (#7584)
    • Direct commit 6a586e64707e: feat(guard): decide cloud actions on facts with version 2 requests (#7583)
    • Direct commit adb043721328: fix(guard): let head and tail read several plain files at once (#7590)
    • Direct commit 81cec1ee4893: feat(guard): inspect cloud action arguments and results for secrets and injection (#7582)
    • Direct commit 062224a04257: fix(guard): read a quoted grep or rg pattern as text, not a shell glob (#7592)
    • Direct commit aa3c39a2e119: feat(guard): run every bounded CLI hook through the native bridge (#7591)
    • Direct commit edc93655b408: feat(guard): describe cloud actions as reviewable packs (#7585)
    • Direct commit 804db7ea0852: test(gauntlet): give the remote-URL scenario a checkout with a remote (#7596)
    • Direct commit dd4c4d9737d3: feat(guard): ship relaxed, balanced and strict cloud policy presets (#7586)
    • Direct commit caf4ab8c77a1: feat(mcp-servers): add Vericto proxy and account MCP contributions

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a76

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger12 credits