Release notes
HOL Guard v3.60.0a87
PreviewHOL Guard v3.60.0a87, released November 14, 2026, is a preview release with 4 additions, 4 improvements, 12 fixes and 4 other changes across 23 merged pull requests. Highlights: Add money facts and form bodies for payment cloud packs; A late Allow once covers one identical retry within the hour.
Changes since the previous release on this channel: alpha/v3.60.0a86alpha/v3.60.0a87
4 added · 4 improved · 12 fixed · 4 other
Key facts
- Version
- v3.60.0a87
- Channel
- Preview
- Published
- Previous release
- alpha/v3.60.0a86
- Merged pull requests
- 23
Documented changes
24 typed entries
Verified contributors
2 verified contributors · 23 credits
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.60.0a87 is a preview release published 2026-11-14. Upstream documents: Guard 3.60.0a87 is an opt-in prerelease cut from 7e269f1. Stable installations remain on the stable channel. 23 commits • 23 merged pull requests • 2 contributors since Guard 3.60.0a86. Its comparison base is alpha/v3.60.0a86. It includes 23 verified contribution deliveries with public evidence links.
Changes
Added
4- guardAdd money facts and form bodies for payment cloud packs (#7696) Evidence for this change
- Money facts. A pack action can declare
money: the integer argument holding the amount in the currency's minor unit, the currency (a pattern-bound argument or a fixed ISO 4217 code), and a direction (outor… - Form bodies. A request body can be a flat
application/x-www-form-urlencodedform built only from declared arguments or scalar constants. Field names allow the bracket notation such APIs read as nesting… - Stripe REST pack (
stripe.json): balance, refunds, payouts, transfers to connected accounts and new prices, all with form bodies. Payouts, transfers and prices carry money facts. A refund takes no currency…
- Money facts. A pack action can declare
- reviewA late Allow once covers one identical retry within the hour (#7691) Evidence for this change
- guardShip Salesforce, Notion, Asana, Atlassian, HubSpot, Box and Stripe MCP packs (#7689) Evidence for this change
- Format** (first commit)
- A
jsonargument type for remote MCP tools whose arguments are objects. It is bounded by encoded size and item count, and can feedrecordCountwhen the pack counts its items. openArguments: a total-size allowance for a remote MCP tool whose argument schema is not published. Every undeclared argument still counts against the bound.
- guardShip Microsoft 365, Sheets, Docs, Airtable and Dropbox cloud action packs (#7684) Evidence for this change
- Format** (first commit)
- A path segment may end in a
:verbcustom method (Google{id}:batchUpdate,values/{range}:append). Argument values stay percent-encoded, so a colon inside an argument becomes%3Aand cannot add a method. - An array argument in the query repeats the parameter once per item (Airtable
records[]), each item bound by the item pattern.
Improved
4- guardMove the Hermes adapter into the native runtime (#7703) Evidence for this change
- guardMove the Claude Code adapter into the native runtime (#7698) Evidence for this change
- guardMove the Cursor adapter into the native runtime (#7692) Evidence for this change
- guardMove the Copilot adapter into the native runtime (#7680) Evidence for this change
Fixed
12- guardFinish the git filter-attribute probe inside the hook budget (#7710) Evidence for this change
- guardRun Python probes fed from a quoted heredoc in the workspace sandbox (#7709) Evidence for this change
- guardLet a contained inline program run the trusted Git it reads with (#7699) Evidence for this change
- cigarAdd project context to Devin, Muse, Z Code, Kimi and Cline prompts (#7695) Evidence for this change
- guardReview a quoted SQL password that holds the other quote (#7707) Evidence for this change
- guardLeave Git and extension holds the resident's budget caused to the daemon (#7711) Evidence for this change
- depsTake dnspython 2.9.2 for its resolver denial of service (#7705) Evidence for this change
- guardWalk each grep include tree once per submission (#7702) Evidence for this change
- the include scope walk in
grep_include_scope_proven; - the pattern clearance walk in
safe_walk_target, which was deliberately left out of the walk memo because it depends on the pattern.
- the include scope walk in
- guardStop persistent hook tampering, install-script additions, proven key writes and off-site data lures (#7687) Evidence for this change
- guardAllow python3 -c filters that only reshape piped JSON (#7685) Evidence for this change
- guardProject a home-spelled launcher for contained calls that name a cwd (#7690) Evidence for this change
- guardRun find -exec sed -i edits in the workspace sandbox (#7679) Evidence for this change
Other changes
4- Guard 3.60.0a87 is an opt-in prerelease cut from
7e269f1. Stable installations remain on the stable channel. 23 commits • 23 merged pull requests • 2 contributors since Guard 3.60.0a86. Evidence for this change - guardGrow the cloud action corpora to every shipped pack (#7700) Evidence for this change
- releaseRestore the Desktop Core alpha feed when an alpha is withdrawn (#7683) Evidence for this change
- Mcp.padam-nocturne: refresh description for 0.4.16 and add extension listing (#7686) Evidence for this change
- Merged pull request #7698: refactor(guard): move the Claude Code adapter into the native runtime (#7698)
- Merged pull request #7702: fix(guard): walk each grep include tree once per submission (#7702)
- Merged pull request #7684: feat(guard): ship Microsoft 365, Sheets, Docs, Airtable and Dropbox cloud action packs (#7684)
- Merged pull request #7680: refactor(guard): move the Copilot adapter into the native runtime (#7680)
- Merged pull request #7683: ci(release): restore the Desktop Core alpha feed when an alpha is withdrawn (#7683)
- Merged pull request #7679: fix(guard): run find -exec sed -i edits in the workspace sandbox (#7679)
- Merged pull request #7692: refactor(guard): move the Cursor adapter into the native runtime (#7692)
- Merged pull request #7691: feat(review): a late Allow once covers one identical retry within the hour (#7691)
- Merged pull request #7696: feat(guard): add money facts and form bodies for payment cloud packs (#7696)
- Merged pull request #7685: fix(guard): allow python3 -c filters that only reshape piped JSON (#7685)
- Merged pull request #7700: test(guard): grow the cloud action corpora to every shipped pack (#7700)
- Merged pull request #7705: fix(deps): take dnspython 2.9.2 for its resolver denial of service (#7705)
- Merged pull request #7711: fix(guard): leave Git and extension holds the resident's budget caused to the daemon (#7711)
- Merged pull request #7707: fix(guard): review a quoted SQL password that holds the other quote (#7707)
- Merged pull request #7695: fix(cigar): add project context to Devin, Muse, Z Code, Kimi and Cline prompts (#7695)
- Merged pull request #7699: fix(guard): let a contained inline program run the trusted Git it reads with (#7699)
- Merged pull request #7686: mcp.padam-nocturne: refresh description for 0.4.16 and add extension listing (#7686)
- Merged pull request #7709: fix(guard): run Python probes fed from a quoted heredoc in the workspace sandbox (#7709)
- Merged pull request #7703: refactor(guard): move the Hermes adapter into the native runtime (#7703)
- Merged pull request #7710: fix(guard): finish the git filter-attribute probe inside the hook budget (#7710)
- Merged pull request #7689: feat(guard): ship Salesforce, Notion, Asana, Atlassian, HubSpot, Box and Stripe MCP packs (#7689)
- Merged pull request #7690: fix(guard): project a home-spelled launcher for contained calls that name a cwd (#7690)
- Merged pull request #7687: fix(guard): stop persistent hook tampering, install-script additions, proven key writes and off-site data lures (#7687)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.60.0a86
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.