diff --git a/guest/pacman.aarch64.conf b/guest/pacman.aarch64.conf
index 6f39a434..d18f2f4b 100644
--- a/guest/pacman.aarch64.conf
+++ b/guest/pacman.aarch64.conf
@@ -10,8 +10,10 @@ HoldPkg = pacman glibc
 # QEMU direct-boots the kernel and initramfs paired with this VM disk. Keep its
 # installed modules and DKMS headers on that exact ABI. Hyprland is likewise
 # held until upstream includes our rounded-border coverage backport; otherwise
-# a routine full-system update can silently restore the defect.
-IgnorePkg = linux-aarch64 linux-aarch64-headers hyprland
+# a routine full-system update can silently restore the defect. Keep aquamarine
+# on the same hold: newer ALARM aquamarine bumps libaquamarine.so past what the
+# pinned Hyprland was built against and aborts Omarchy's updater mid-transaction.
+IgnorePkg = linux-aarch64 linux-aarch64-headers hyprland aquamarine
 Architecture = auto
 CheckSpace
 ParallelDownloads = 5
diff --git a/guest/tests/verify.py b/guest/tests/verify.py
index fbea105f..83cba05e 100755
--- a/guest/tests/verify.py
+++ b/guest/tests/verify.py
@@ -247,8 +247,9 @@ def main() -> None:
         "factory pacman retains the ARM Omarchy keyring repository",
     )
     check(
-        "IgnorePkg = linux-aarch64 linux-aarch64-headers hyprland" in pacman_conf,
-        "factory pacman holds the QEMU-booted kernel, matching headers, and patched compositor",
+        "IgnorePkg = linux-aarch64 linux-aarch64-headers hyprland aquamarine"
+        in pacman_conf,
+        "factory pacman holds the QEMU-booted kernel, matching headers, patched compositor, and its aquamarine ABI",
     )
     arm_mirrorlist = read(GUEST / "mirrorlist.aarch64")
     check(