Release notes

HOL Guard v3.60.0a84

Preview

HOL Guard v3.60.0a84, released November 13, 2026, is a preview release with 1 improvement, 8 fixes and 2 other changes across 10 merged pull requests. Highlights: Move the Pi, Oh My Pi and OpenCode adapters into the native runtime; Heal an authority head stranded off its pack activation's catalog.

Changes since the previous release on this channel: alpha/v3.60.0a83alpha/v3.60.0a84

1 improved · 8 fixed · 2 other

Published Original GitHub release for alpha/v3.60.0a84

Key facts

Version
v3.60.0a84
Channel
Preview
Published
Previous release
alpha/v3.60.0a83
Merged pull requests
10

Documented changes

11 typed entries

Verified contributors

2 verified contributors · 11 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a84 is a preview release published 2026-11-13. Upstream documents: Guard 3.60.0a84 is an opt-in prerelease cut from fecf79c. Stable installations remain on the stable channel. 10 commits • 10 merged pull requests • 2 contributors since Guard 3.60.0a83. Its comparison base is alpha/v3.60.0a83. It includes 11 verified contribution deliveries with public evidence links.

Changes

Improved

1

Fixed

8
  • guardHeal an authority head stranded off its pack activation's catalog (#7674) Evidence for this change
  • guardLet jq read values bound with --arg and --slurpfile (#7667) Evidence for this change
  • guardLock the daemon replay state on Windows (#7663) Evidence for this change
  • guardLet a fetched file be saved and read back in one command (#7664) Evidence for this change
    • A later step that reads a temporary file that does not exist yet was only proven beside plain peers such as cat and jq. The concern is that an earlier step could put a symlink at that path before the read. gh and…
    • base64 was missing from the readers that may follow a leading write, and from the chain peers. That is why even echo aGk= > /tmp/a.b64 && base64 -D -i /tmp/a.b64 was reviewed.
  • readmePreserve synthetic sponsor referral (#7670) Evidence for this change
    • Restore the Synthetic sponsor referral URL in the HOL Guard README.
  • guardLet awk read ARGV and ARGC to tell its input files apart (#7669) Evidence for this change
  • guard-runtimePreserve live daemon state when retirement cannot verify identity (#7656) Evidence for this change
    • Preserve authenticated daemon state when retirement cannot verify the recorded process identity.
    • Require proof that a markerless daemon PID is dead before clearing state or starting a replacement.
    • Keep stalled launch cleanup fail-closed while allowing a verified foreign wrapper to release its pending launch receipt.
  • guardProve grep --include over a ~/ root like its absolute path (#7668) Evidence for this change

Other changes

2
  • Guard 3.60.0a84 is an opt-in prerelease cut from fecf79c. Stable installations remain on the stable channel. 10 commits • 10 merged pull requests • 2 contributors since Guard 3.60.0a83. Evidence for this change
  • gauntletCover safe semicolon-cd Git reads in a live agent (#7501) Evidence for this change
    • Merged pull request #7667: fix(guard): let jq read values bound with --arg and --slurpfile
    • Merged pull request #7674: fix(guard): heal an authority head stranded off its pack activation's catalog
    • Direct commit 217ebf40bad8: fix(guard-runtime): keep stalled launch cleanup fail-closed
    • Merged pull request #7668: fix(guard): prove grep --include over a ~/ root like its absolute path
    • Merged pull request #7669: fix(guard): let awk read ARGV and ARGC to tell its input files apart
    • Merged pull request #7501: test(gauntlet): cover safe semicolon-cd Git reads in a live agent
    • Merged pull request #7656: fix(guard-runtime): preserve live daemon state when retirement cannot verify identity
    • Merged pull request #7664: fix(guard): let a fetched file be saved and read back in one command
    • Merged pull request #7670: fix(readme): preserve synthetic sponsor referral
    • Merged pull request #7659: refactor(guard): move the Pi, Oh My Pi and OpenCode adapters into the native runtime
    • Merged pull request #7663: fix(guard): lock the daemon replay state on Windows

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a83

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger11 credits