Release notes

HOL Guard v3.60.0a81

Preview

HOL Guard v3.60.0a81, released November 13, 2026, is a preview release with 2 fixes and 1 other change across 2 merged pull requests. Highlights: Give the Desktop Core signature check time to verify a sealed launcher; Let agents run hol-guard mcp list and extensions list without review.

Changes since the previous release on this channel: alpha/v3.60.0a80alpha/v3.60.0a81

2 fixed · 1 other

Published Original GitHub release for alpha/v3.60.0a81

Key facts

Version
v3.60.0a81
Channel
Preview
Published
Previous release
alpha/v3.60.0a80
Merged pull requests
2

Documented changes

3 typed entries

Verified contributors

1 verified contributor · 2 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a81 is a preview release published 2026-11-13. Upstream documents: Guard 3.60.0a81 is an opt-in prerelease cut from 64c6a14. Stable installations remain on the stable channel. 2 commits • 2 merged pull requests • 1 contributor since Guard 3.60.0a80. Its comparison base is alpha/v3.60.0a80. It includes 2 verified contribution deliveries with public evidence links.

Changes

Fixed

2
  • guardGive the Desktop Core signature check time to verify a sealed launcher (#7650) Evidence for this change
    • _verify_candidate checked the launcher twice (_macos_codesign_ok and then _macos_signing_team), paying the slow verify twice per candidate. It now runs one check, which still fails closed: no verified team raises…
    • The Python check now gives codesign 30 seconds, the same ceiling the seal check already uses.
    • The native tree walk also verifies the launcher among the Mach-O files, so its per-file ceiling goes from 5 to 30 seconds. Small files still finish in about 0.3 seconds; the ceiling only bounds a hung codesign.
  • guardLet agents run hol-guard mcp list and extensions list without review (#7647) Evidence for this change
    • Merged pull request #7647: fix(guard): let agents run hol-guard mcp list and extensions list without review
    • Merged pull request #7650: fix(guard): give the Desktop Core signature check time to verify a sealed launcher

Other changes

1

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a80

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger2 credits