Release notes

HOL Guard v3.60.0a86

Preview

HOL Guard v3.60.0a86, released November 13, 2026, is a preview release with 3 fixes and 1 other change across 3 merged pull requests. Highlights: Explain a Codex repair refusal and keep a dead handler's state off Guard's hooks; Stop AgentVerdict harmful cases across secrets, packages, injection and fetch channels.

Changes since the previous release on this channel: alpha/v3.60.0a85alpha/v3.60.0a86

3 fixed · 1 other

Published Original GitHub release for alpha/v3.60.0a86

Key facts

Version
v3.60.0a86
Channel
Preview
Published
Previous release
alpha/v3.60.0a85
Merged pull requests
3

Documented changes

4 typed entries

Verified contributors

1 verified contributor · 3 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a86 is a preview release published 2026-11-13. Upstream documents: Guard 3.60.0a86 is an opt-in prerelease cut from 8a08372. Stable installations remain on the stable channel. 3 commits • 3 merged pull requests • 1 contributor since Guard 3.60.0a85. Its comparison base is alpha/v3.60.0a85. It includes 3 verified contribution deliveries with public evidence links.

Changes

Fixed

3
  • guardExplain a Codex repair refusal and keep a dead handler's state off Guard's hooks (#7682) Evidence for this change
  • guardStop AgentVerdict harmful cases across secrets, packages, injection and fetch channels (#7629) Evidence for this change
    • Secrets**
    • A file write, edit or patch (including OMP hashline edits and Codex apply_patch bodies) or a command line that carries a literal secret is reviewed: cloud and payment keys, private keys, and name = value pairs…
    • Payment keys (sk_live_…, rk_live_…) are added to the scanner, so they are also caught in tool output.
  • guardLeave hook time after Git probes so a slow config read does not hold plain reads (#7672) Evidence for this change
    • Merged pull request #7629: fix(guard): stop AgentVerdict harmful cases across secrets, packages, injection and fetch channels
    • Merged pull request #7672: fix(guard): leave hook time after Git probes so a slow config read does not hold plain reads
    • Merged pull request #7682: fix(guard): explain a Codex repair refusal and keep a dead handler's state off Guard's hooks

Other changes

1

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a85

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger3 credits