Release notes

HOL Guard v3.60.0a88

Preview

HOL Guard v3.60.0a88, released November 14, 2026, is a preview release with 4 additions, 1 improvement, 1 fix and 4 other changes across 9 merged pull requests. Highlights: Apply Cloud rules that name a command risk group; Add opt-in Telemio hosted server policy.

Changes since the previous release on this channel: alpha/v3.60.0a87alpha/v3.60.0a88

4 added · 1 improved · 1 fixed · 4 other

Published Original GitHub release for alpha/v3.60.0a88

Key facts

Version
v3.60.0a88
Channel
Preview
Published
Previous release
alpha/v3.60.0a87
Merged pull requests
9

Documented changes

10 typed entries

Verified contributors

Credits being verified. Attribution coverage is in progress.

Attribution coverage

attribution in progress; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a88 is a preview release published 2026-11-14. Upstream documents: Guard 3.60.0a88 is an opt-in prerelease cut from 5ade44b. Stable installations remain on the stable channel. 9 commits • 9 merged pull requests • 4 contributors since Guard 3.60.0a87. Its comparison base is alpha/v3.60.0a87. It includes 11 verified contribution deliveries with public evidence links. Attribution for this release is being verified.

Changes

Added

4
  • policyApply Cloud rules that name a command risk group (#7717) Evidence for this change
  • mcpAdd opt-in Telemio hosted server policy (#7666) Evidence for this change
  • guardSimulate a cloud policy pack over stored call facts (#7704) Evidence for this change
    • Input: a preset or policyPack, plus calls — up to 1000 stored calls, each with provider, actionId, the facts Guard recorded when it decided the call, and optionally effect, connectionId, resourceId…
    • Output: per call, the policy action, matchedRuleIds, and unknownRuleIds (rules that would match if unknown facts were known).
    • Decisions come from the same join PolicyPack::decide uses for fixtures, now exposed as decide_with_rules.
  • reviewName the risk groups of a command sent to Cloud Review (#7694) Evidence for this change

Improved

1

Fixed

1

Other changes

4
  • Guard 3.60.0a88 is an opt-in prerelease cut from 5ade44b. Stable installations remain on the stable channel. 9 commits • 9 merged pull requests • 4 contributors since Guard 3.60.0a87. Evidence for this change
  • benchmarksRecord CIGAR savings with every Guard hook on after the review-hold fixes (#7716) Evidence for this change
  • gauntletQuote the planted note so the model writes both sentences (#7719) Evidence for this change
  • Refresh DC Hub MCP contribution name and description (#7712) Evidence for this change
    • Merged pull request #7717: feat(policy): apply Cloud rules that name a command risk group (#7717)
    • Merged pull request #7694: feat(review): name the risk groups of a command sent to Cloud Review (#7694)
    • Merged pull request #7716: docs(benchmarks): record CIGAR savings with every Guard hook on after the review-hold fixes (#7716)
    • Merged pull request #7719: test(gauntlet): quote the planted note so the model writes both sentences (#7719)
    • Merged pull request #7704: feat(guard): simulate a cloud policy pack over stored call facts (#7704)
    • Merged pull request #7693: fix(dashboard): save Core update preferences when Enter is pressed (#7693)
    • Merged pull request #7713: refactor(guard): move the Codex adapter into the native runtime (#7713)
    • Merged pull request #7666: feat(mcp): add opt-in Telemio hosted server policy (#7666)
    • Merged pull request #7712: Refresh DC Hub MCP contribution name and description (#7712)
    • Direct commit 69fcc61a0c76: fix: clarify DC Hub review-gated behavior
    • Direct commit ec4e4c60b370: test(dashboard): submit the update preferences form in its own test file

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a87

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger11 credits