Release notes

HOL Guard v3.60.0a9

Preview

HOL Guard v3.60.0a9, released November 6, 2026, is a preview release with 3 additions, 6 fixes and 5 other changes across 13 merged pull requests. Highlights: Write local extension grants and continuity natively; Bootstrap, commit, resume, migrate and manifest writes in the resident.

Changes since the previous release on this channel: alpha/v3.60.0a7alpha/v3.60.0a9

3 added · 6 fixed · 5 other

Published Original GitHub release for alpha/v3.60.0a9

Key facts

Version
v3.60.0a9
Channel
Preview
Published
Previous release
alpha/v3.60.0a7
Merged pull requests
13

Documented changes

14 typed entries

Verified contributors

2 verified contributors · 14 credits

Attribution coverage

attribution complete; history inventory partial.

Install

Current installation guide

Scope

Guard v3.60.0a9 is a preview release published 2026-11-06. Upstream documents: Guard 3.60.0a9 is an opt-in prerelease cut from 9fc37cb. Stable installations remain on the stable channel. 13 commits • 13 merged pull requests • 2 contributors since Guard 3.60.0a7. Its comparison base is alpha/v3.60.0a7. It includes 14 verified contribution deliveries with public evidence links.

Changes

Added

3
  • storeWrite local extension grants and continuity natively (#7309) Evidence for this change
    • New native methods are apply_custom_extension_continuity and upsert_local_cli_grant. They live in guard_store_continuity_write.rs.
    • Every refusal keeps its Python message, so callers and the HTTP API return the same errors as before.
    • The capability refusals (invalid_capabilities, capabilities_require_cli_surface, capabilities_require_allowed_grant) are raised as LocalCliCapabilityError again on the Python side.
  • extension-controlBootstrap, commit, resume, migrate and manifest writes in the resident (#7295) Evidence for this change
    • bootstrap takes the bootstrap plan and inserts the revision-zero snapshot in one immediate transaction, then seals the committed anchor into the credential vault and reads it back.
    • commit_prepare takes the commit plan, reserves the proof and writes the prepared transition in the same transaction, so no other writer can claim the revision in between. resume with the reserved proof finishes the…
    • migrate commits a catalog rebinding: the prepared row, the anchored anchor, the snapshot move, the migration event (and the regression row for a downgrade), then the committed anchor. The migration event is built…
  • daemonRestore and roll back extension-control authority in the resident (#7292) Evidence for this change
    • restore re-creates the snapshot row, plus the baseline transition it needs, from a verified export that matches the committed vault anchor. It also records the extension_control_authority_restored event.
    • roll_back removes the prepared transition the vault anchor never moved past, along with its command-pack reservation and its unconsumed proofs.

Fixed

6

Other changes

5
  • Guard 3.60.0a9 is an opt-in prerelease cut from 9fc37cb. Stable installations remain on the stable channel. 13 commits • 13 merged pull requests • 2 contributors since Guard 3.60.0a7. Evidence for this change
  • gauntletCover a saved Always allow and an allowed contributed extension (#7308) Evidence for this change
  • gatesGive the macOS gate shards twelve minutes (#7286) Evidence for this change
  • gauntletQualify against Oh My Pi 18.16.0 on Bun 1.4.4 (#7287) Evidence for this change
  • gauntletQualify against Oh My Pi 18.13.2 (#7285) Evidence for this change
    • Merged pull request #7291: fix(protect): show the authenticator wait before the install runs (#7291)
    • Merged pull request #7308: test(gauntlet): cover a saved Always allow and an allowed contributed extension (#7308)
    • Merged pull request #7287: chore(gauntlet): qualify against Oh My Pi 18.16.0 on Bun 1.4.4 (#7287)
    • Merged pull request #7295: feat(extension-control): bootstrap, commit, resume, migrate and manifest writes in the resident (#7295)
    • Merged pull request #7271: fix(cigar): stop setting a Codex summary size by default (#7271)
    • Merged pull request #7286: ci(gates): give the macOS gate shards twelve minutes (#7286)
    • Merged pull request #7294: fix(cigar): find the files a prompt names, big modules and reST docs (#7294)
    • Direct commit df8bad68139c: feat(daemon): restore and roll back extension-control authority in the resident (#7292)
    • Merged pull request #7284: fix(command): read a heredoc commit message as the value it is (#7284)
    • Direct commit 73c8751f2425: Merge main into chore/omp-18-16-bun-1-4-4
    • Merged pull request #7277: fix(command): read a heredoc that carries a commit message as data (#7277)
    • Merged pull request #7285: chore(gauntlet): qualify against Oh My Pi 18.13.2 (#7285)
    • Merged pull request #7309: feat(store): write local extension grants and continuity natively (#7309)
    • Merged pull request #7269: fix(command): keep an ordinary worktree setup chain out of review (#7269)

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: alpha/v3.60.0a7

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Contributors

Evidence ledger14 credits