Release notes

HOL Guard v3.60.0a83

Preview

HOL Guard v3.60.0a83, released November 13, 2026, is a preview release with 1 improvement, 14 fixes and 1 other change across 15 merged pull requests. Highlights: Move the Grok and ZCode adapters into the native runtime; Stop closing the native policy fence for a re-signed policy bundle.

Changes since the previous release on this channel: alpha/v3.60.0a82alpha/v3.60.0a83

1 improved · 14 fixed · 1 other

Published Original GitHub release for alpha/v3.60.0a83

Key facts

Version
v3.60.0a83
Channel
Preview
Published
Previous release
alpha/v3.60.0a82
Merged pull requests
15

Documented changes

16 typed entries

Verified contributors

1 verified contributor · 15 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a83 is a preview release published 2026-11-13. Upstream documents: Guard 3.60.0a83 is an opt-in prerelease cut from b299a1e. Stable installations remain on the stable channel. 15 commits • 15 merged pull requests • 1 contributor since Guard 3.60.0a82. Its comparison base is alpha/v3.60.0a82. It includes 15 verified contribution deliveries with public evidence links.

Changes

Improved

1
  • guardMove the Grok and ZCode adapters into the native runtime (#7649) Evidence for this change
    • Merged pull request #7652: fix(guard): allow Git reads from editor terminals that export core.quotePath
    • Merged pull request #7651: fix(guard): let agents inspect execute-bound-bash --help without review
    • Merged pull request #7649: refactor(guard): move the Grok and ZCode adapters into the native runtime
    • Merged pull request #7653: fix(guard): accept harness working directories the user owns outside the home
    • Merged pull request #7637: fix(runtime): run contained Codex calls behind its default sandbox
    • Merged pull request #7654: fix(guard): let Grok search its integration tools without review
    • Merged pull request #7657: fix(readme): render sponsor logos cleanly
    • Merged pull request #7661: fix(guard): let a pipeline save its output to a scratch file without review
    • Merged pull request #7660: fix(pi): say why and exit nonzero when Guard stops a headless prompt
    • Merged pull request #7658: fix(guard): let Cursor write its spilled tool output without review
    • Merged pull request #7655: fix(guard): let agents check Guard's saved network rules without review
    • Merged pull request #7662: fix(guard): let one process at a time migrate the installed command packs after an upgrade
    • Merged pull request #7648: fix(guard): let agents probe a linked worktree for index.lock and MERGE_HEAD
    • Merged pull request #7665: fix(guard): stop closing the native policy fence for a re-signed policy bundle
    • Merged pull request #7636: fix(command): allow PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 in front of a test run

Fixed

14
  • guardStop closing the native policy fence for a re-signed policy bundle (#7665) Evidence for this change
  • guardLet one process at a time migrate the installed command packs after an upgrade (#7662) Evidence for this change
    • A private turn file in the runtime state directory (installed-authority-migration.v1.lock) is held for the whole migration.
    • The worker host waits for its turn (bounded at 180 s). When another process finishes first, the worker's own attempt takes the existing fast path.
    • An extension-control host never queues. When the turn is taken, it starts on its fallback view, leaves the migration pending, and retries on its refresh tick. That path existed already. Nothing is recorded as a…
  • guardLet agents check Guard's saved network rules without review (#7655) Evidence for this change
  • piSay why and exit nonzero when Guard stops a headless prompt (#7660) Evidence for this change
  • readmeRender sponsor logos cleanly (#7657) Evidence for this change
    • Replace bordered sponsor tables with centered README logo rows.
    • Use the official Yanez logo and wordmark geometry in a local SVG asset.
    • Center the sponsor badge below the sponsor note.
  • guardLet a pipeline save its output to a scratch file without review (#7661) Evidence for this change
  • guardLet Cursor write its spilled tool output without review (#7658) Evidence for this change
  • guardLet Grok search its integration tools without review (#7654) Evidence for this change
  • guardLet agents inspect execute-bound-bash --help without review (#7651) Evidence for this change
  • commandAllow PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 in front of a test run (#7636) Evidence for this change
  • runtimeRun contained Codex calls behind its default sandbox (#7637) Evidence for this change
    • python-eval-readonly-v1, node-eval-readonly-v1, package-test-readonly-v1, node-build-output-v1, node-tool-readonly-v1, git-readonly-v1, vitest-readonly-v1, node-test-readonly-v1, plus the existing…
  • guardAccept harness working directories the user owns outside the home (#7653) Evidence for this change
  • guardAllow Git reads from editor terminals that export core.quotePath (#7652) Evidence for this change
  • guardLet agents probe a linked worktree for index.lock and MERGE_HEAD (#7648) Evidence for this change

Other changes

1

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a82

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger15 credits