Release notes

HOL Guard v3.60.0a85

Preview

HOL Guard v3.60.0a85, released November 13, 2026, is a preview release with 2 additions, 1 improvement, 2 fixes and 2 other changes across 6 merged pull requests. Highlights: Turn Guard and CIGAR on or off from an app's own page; Draft, validate and explain cloud action packs from the CLI.

Changes since the previous release on this channel: alpha/v3.60.0a84alpha/v3.60.0a85

2 added · 1 improved · 2 fixed · 2 other

Published Original GitHub release for alpha/v3.60.0a85

Key facts

Version
v3.60.0a85
Channel
Preview
Published
Previous release
alpha/v3.60.0a84
Merged pull requests
6

Documented changes

7 typed entries

Verified contributors

1 verified contributor · 6 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a85 is a preview release published 2026-11-13. Upstream documents: Guard 3.60.0a85 is an opt-in prerelease cut from b34b183. Stable installations remain on the stable channel. 6 commits • 6 merged pull requests • 1 contributor since Guard 3.60.0a84. Its comparison base is alpha/v3.60.0a84. It includes 6 verified contribution deliveries with public evidence links.

Changes

Added

2
  • guardTurn Guard and CIGAR on or off from an app's own page (#7681) Evidence for this change
  • guardDraft, validate and explain cloud action packs from the CLI (#7673) Evidence for this change
    • Classes come from the existing name classifier, which never proposes below update. A GET drops to read only when its name gives the classifier no evidence, and a DELETE is never below delete. MCP tools keep…
    • Every non-read action is proposed permanent.
    • Argument bounds come from the schema (maxLength, minimum/maximum, maxItems, anchored pattern, enum → whole-value pattern) or fixed limits. Arguments no pack type can bound are left out and reported in…

Improved

1

Fixed

2
  • secretsPreserve headless policy integrity fallback (#7678) Evidence for this change
    • Use the encrypted local vault when an ordinary policy-integrity keyring write is unavailable.
    • Persist fallback preference so paired key and control metadata remain authoritative across backend reconstruction.
    • Keep control-state updates fail-closed and preserve both store errors when neither write succeeds.
  • guardRead credential words in find name tests and pytest -k as patterns, and let approvals wait name Guard's own home (#7675) Evidence for this change

Other changes

2
  • Guard 3.60.0a85 is an opt-in prerelease cut from b34b183. Stable installations remain on the stable channel. 6 commits • 6 merged pull requests • 1 contributor since Guard 3.60.0a84. Evidence for this change
  • gauntletGive the heredoc commit case a README change to commit (#7676) Evidence for this change
    • Merged pull request #7681: feat(guard): turn Guard and CIGAR on or off from an app's own page
    • Merged pull request #7676: test(gauntlet): give the heredoc commit case a README change to commit
    • Merged pull request #7673: feat(guard): draft, validate and explain cloud action packs from the CLI
    • Merged pull request #7678: fix(secrets): preserve headless policy integrity fallback
    • Merged pull request #7671: refactor(guard): move the Cline adapter into the native runtime
    • Merged pull request #7675: fix(guard): read credential words in find name tests and pytest -k as patterns, and let approvals wait name Guard's own home

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a84

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger6 credits