Holochain confines grant checks to private entries; Moss lets groups fetch collaboration Tools from members when its library is unreachable.
Holochain merged @veeso’s change on 24 September 2026 to read capability grants only from the chain author’s private entries, ruling out public copies and another agent’s copy. Moss merged @zippy’s member-to-member Tool installation on 24 September 2026, letting group members obtain a Tool from another member when the library is unreachable.
Holochain keeps capability grants tied to private entries
Holochain is an open-source framework for developing peer-to-peer applications. @veeso’s merged change means grant lookups read only entries private to the chain author. Capability-based security controls access to app functions; the change prevents public copies and another agent’s copy from being treated as a valid grant.
Previously, grant lookup checked the public entry table before the author’s private entries; it now reads only the author’s private entries at each conductor resolution point. The change merged as #5997 on 24 September 2026.
Moss installs group Tools from members when the library is unreachable
Moss lets groups build collaboration spaces by composing custom Tool suites, with each group and Tool on its own private peer-to-peer network. @zippy’s merged change lets a group member request a Tool from other members if its library cannot be reached. Moss first reuses assets already on the computer; otherwise, a member supplies the Tool’s files in chunks.
The receiving computer verifies the happ hash and each file hash before saving the assets. The interface shows whether a Tool is available from the library, the computer or a group member, and shows transfer progress. Moss says its installation path lets Tools be listed and opened without waiting for the library. The change merged as #241 on 24 September 2026. Its live test transferred a 2.8 MB happ and an 8.1 MB webhapp in chunks of up to 4 MiB, the largest size the author verified.
Kitsune2 orders peer endpoints and wind-tunnel measures startup
Kitsune2 merged #642 to order known-peer endpoints by advertisement time, #641 as a quick fix for URL availability before relay, #639 to record wrong-peer gossip messages as peer behavior rather than local errors, and #662 to preserve sends during simultaneous open. Wind-tunnel merged #711 to measure conductor startup as installed cells move from disabled to enabled, with reporting and visualisation; #708 changes the first-connection scenario into a hole-punch and throughput test, and #724 makes smoke tests fail on an agent panic.
Holochain adds command-line workflows and AD4M changes link languages
Holochain merged #5993 by @veeso on 23 September 2026 to add membrane-proof workflows to its command-line tools. AD4M, an agent-centric social network and interoperability app framework, merged #1037 by @HexaField to add end-to-end encryption for link payloads and unique neighbourhood addresses. AD4M also merged #1084, which supplies a default server address and reads template parameters when cloning link languages.
Presence adds audio and Moss passes invitations locally
Presence merged #5 by @zippy on 24 September 2026 so users can include computer audio in the outgoing microphone track, selected through Moss’s picker. Peers hear it mixed with the microphone over WebRTC and signals. Presence merged #6 by @zippy on 24 September 2026 to order the room grid by the time participants joined.
Moss merged #242 by @zippy on 24 September 2026 so people in the same room can pass a group invitation between machines over the local network without sending the invite code in the clear. Moss also merged #248 by @zippy on 23 September 2026, letting a Tool ask Moss for audio playing on the user’s computer.
Hearth publishes v0.3.4; Moss passes invitations locally
Hearth, a shared care record for families, published v0.3.4 on 23 September 2026. Moss’s #242 invitation handoff lets people in the same room pass a group invitation between machines on the local network without sending the code in the clear. Kitsune2’s #645, opened by @light-merlin-dark on 19 September 2026, is under review; it proposes waking listeners waiting for the fetch queue to drain when the final response arrives, including gossip initiation.
The ecosystem records commits and publishes releases
Across the 7 days to 2 October 2026, the ecosystem recorded 349 commits and 11 releases. In the 30 days to 2 October, it recorded 92 releases and 106 active code bases; 46 people contributed in the 90 days to 2 October. These counts were recorded on 2 October 2026.
From 26 September to 2 October 2026, 26 pull requests merged by people and 30 automated update pull requests merged; these counts were recorded on 3 October 2026. Daily commits across active code bases were 52 on Monday 28 September, 68 on Tuesday 29 September and 44 on Wednesday 30 September, within the 7 days to 2 October 2026.
Chart data
| commits | |
|---|---|
| Sat 26 | 19 |
| Sun 27 | 9 |
| Mon 28 | 52 |
| Tue 29 | 68 |
| Wed 30 | 44 |
| Thu 1 | 35 |
| Fri 2 | 29 |
For builders composing Holochain apps as group Tools, Moss’s member-supplied installation offers a route to keep those tools available when the online library cannot be reached. The change leaves the group’s peers as a source of the files needed to install them.