Release notes

HOL Guard v3.60.0a78

Preview

HOL Guard v3.60.0a78, released November 12, 2026, is a preview release with 1 improvement, 6 fixes and 1 other change across 7 merged pull requests. Highlights: Plan Codex shell-guard cleanup and proxy recognition in the native runtime; Fetch missing security proofs together after an upgrade.

Changes since the previous release on this channel: alpha/v3.60.0a77alpha/v3.60.0a78

1 improved · 6 fixed · 1 other

Published Original GitHub release for alpha/v3.60.0a78

Key facts

Version
v3.60.0a78
Channel
Preview
Published
Previous release
alpha/v3.60.0a77
Merged pull requests
7

Documented changes

8 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a78 is a preview release published 2026-11-12. Upstream documents: Guard 3.60.0a78 is an opt-in prerelease cut from 5be5986. Stable installations remain on the stable channel. 7 commits • 7 merged pull requests • 1 contributor since Guard 3.60.0a77. Its comparison base is alpha/v3.60.0a77. It includes 7 verified contribution deliveries with public evidence links. Attribution for this release is being verified.

Changes

Improved

1
  • guardPlan Codex shell-guard cleanup and proxy recognition in the native runtime (#7599) Evidence for this change
    • Direct commit 5be598644e5f: fix(guard): fetch missing security proofs together after an upgrade (#7593)
    • Direct commit 56681cd1ef56: fix(guard): turn off Bun's automatic .env load inside contained runs (#7595)
    • Direct commit 3082c905b579: fix(guard): read more jq filters as read-only (#7594)
    • Direct commit f8a1452857e3: fix(guard): search a glob that matches more files than Guard lists (#7598)
    • Direct commit cb0b7d06ed5d: refactor(guard): plan Codex shell-guard cleanup and proxy recognition in the native runtime (#7599)
    • Direct commit 8c6014a01369: fix(guard): keep a timed-out check reviewable when no disabled extension can reach the command (#7600)
    • Direct commit e0c6694c2e0a: fix(guard): keep signal-zero checks and named rereads out of prompt review (#7603)

Fixed

6
  • guardFetch missing security proofs together after an upgrade (#7593) Evidence for this change
    • active_pack_security/proofs.rs: before the ordered pass, complete now walks every selected pack's proof reads (manifest, reviewed trust path, revocation index and records) without touching state and returns all…
    • An invalid proof only stops the batch. The ordered pass still reports it exactly as before, so a batch never surfaces an error the one-at-a-time order would not.
    • Objects are content-addressed and the prefetch is read-only, so fetch order cannot change any quarantine, floor or revocation decision. Each request is still charged once against the existing transfer budget and round…
  • guardTurn off Bun's automatic .env load inside contained runs (#7595) Evidence for this change
  • guardRead more jq filters as read-only (#7594) Evidence for this change
  • guardSearch a glob that matches more files than Guard lists (#7598) Evidence for this change
  • guardKeep a timed-out check reviewable when no disabled extension can reach the command (#7600) Evidence for this change
  • guardKeep signal-zero checks and named rereads out of prompt review (#7603) Evidence for this change

Other changes

1

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a77

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger7 credits