diff --git a/CHANGELOG.md b/CHANGELOG.md
index e5a77d49..64348a26 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,8 @@
 
 ### Added
 
+- **mcpplibs.os 0.2.8.** Process options expose granted directories and rights, confinement requests, resource preferences and the system null device. The corrected platform 0.23.2 group is verified on native, hosted and four image hosts. The os test member follows the release. GLOBAL and CN archives have the same verified SHA256.
+
 - **openkal-platform 0.23.2.** The corrected version group pins musl 0.27.2, llvm-runtime 0.18.3 and image tools 0.4.2; the published musl image edge now selects the same loader. It requires mcpp 2026.11.3.1. GLOBAL and CN archives have the same verified SHA256. The older published groups remain unchanged.
 
 - **openkal-llvm-runtime 0.18.3.** The runtime pins openkal-musl 0.27.2, whose image loader edge selects openkal-ld 0.4.2. The openkal test member follows the release. GLOBAL and CN archives have the same verified SHA256.
diff --git a/pkgs/o/os.lua b/pkgs/o/os.lua
index a3c99956..07cdd578 100644
--- a/pkgs/o/os.lua
+++ b/pkgs/o/os.lua
@@ -31,6 +31,13 @@ package = {
 
     xpm = {
         linux = {
+            ["0.2.8"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.8/os-0.2.8.tar.gz",
+                },
+                sha256 = "f64f2625cd111011a2477c8c69b270237c7cdd1f0e237b883bac6a49e6730c0b",
+            },
             ["0.2.7"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.7.tar.gz",
@@ -101,6 +108,13 @@ package = {
             },
         },
         macosx = {
+            ["0.2.8"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.8/os-0.2.8.tar.gz",
+                },
+                sha256 = "f64f2625cd111011a2477c8c69b270237c7cdd1f0e237b883bac6a49e6730c0b",
+            },
             ["0.2.7"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.7.tar.gz",
@@ -171,6 +185,13 @@ package = {
             },
         },
         windows = {
+            ["0.2.8"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.8/os-0.2.8.tar.gz",
+                },
+                sha256 = "f64f2625cd111011a2477c8c69b270237c7cdd1f0e237b883bac6a49e6730c0b",
+            },
             ["0.2.7"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.7.tar.gz",
diff --git a/tests/examples/os/mcpp.toml b/tests/examples/os/mcpp.toml
index bfa022f7..82540ee2 100644
--- a/tests/examples/os/mcpp.toml
+++ b/tests/examples/os/mcpp.toml
@@ -7,7 +7,7 @@ name    = "os-tests"
 version = "0.1.0"
 
 [dependencies.mcpplibs]
-os = "0.2.7"
+os = "0.2.8"
 
 [indices]
 mcpplibs = { path = "../../.." }