diff --git a/pkgbuilds/omarchy-mac-boot/PKGBUILD b/pkgbuilds/omarchy-mac-boot/PKGBUILD
index 65bbedbf..0a9e7c31 100644
--- a/pkgbuilds/omarchy-mac-boot/PKGBUILD
+++ b/pkgbuilds/omarchy-mac-boot/PKGBUILD
@@ -11,6 +11,7 @@ pkgver=20260925
 pkgrel=1
 pkgdesc='Apple Silicon boot support for Omarchy: initramfs, in-place encryption, first boot and Limine activation'
 arch=('aarch64')
+groups=('omarchy-platform-apple-silicon')
 url='https://github.com/omacom/omarchy-mac'
 license=('MIT')
 makedepends=('git')
@@ -19,9 +20,9 @@ conflicts=('omarchy-apple-boot' 'omarchy-first-boot')
 replaces=('omarchy-apple-boot' 'omarchy-first-boot')
 install=omarchy-mac-boot.install
 # An exact omarchy-mac commit, never a branch.
-_commit=602266c8887cbfe7d995be2d56f241d0c955bccb
+_commit=3a58abb5badf6595567695ad0db1bfe9150093ea
 source=("omarchy-mac::git+https://github.com/omacom/omarchy-mac.git#commit=${_commit}")
-sha256sums=('6d7d3fc59de5178b9acd62b81e3a279f75e099527b8210e5a338b3098c525e9e')
+sha256sums=('c81a3ba25a27ee90092179dd48b98292cdfd04adfefcd4de40379f9b37d2de5b')
 
 prepare() {
   # Tests and staging must not be able to read the surrounding desktop source.
diff --git a/pkgbuilds/omarchy-mac-boot/README.md b/pkgbuilds/omarchy-mac-boot/README.md
index cc44c59d..11eced11 100644
--- a/pkgbuilds/omarchy-mac-boot/README.md
+++ b/pkgbuilds/omarchy-mac-boot/README.md
@@ -6,7 +6,7 @@ It follows the fork recipe in maralcbr/omarchy-pkgs (`asahi-quattro`, `pkgbuilds
 
 ## Scope
 
-The package is aarch64-only and published to edge only. It widens to rc and stable only after M1 and M2 cold-boot qualification. Its only provides are the retired Apple-only names, and nothing generic depends on it or on them, so nothing generic can pull it onto non-Apple aarch64 machines. Its one Apple-only dependency, `asahi-scripts`, comes from the asahi-alarm repository that only the Apple profile configures.
+The package is aarch64-only and published to edge only. It widens to rc and stable only after M1 and M2 cold-boot qualification. It carries the Apple platform tag, `groups=('omarchy-platform-apple-silicon')`, so omarchy-settings' pacman platform guard keeps it off other machines (omacom/omarchy-mac `docs/platform-guard.md`). Its only provides are the retired Apple-only names, and nothing generic depends on it or on them, so nothing generic can pull it onto non-Apple aarch64 machines. Its one Apple-only dependency, `asahi-scripts`, comes from the asahi-alarm repository that only the Apple profile configures.
 
 It requires `limine-mkinitcpio-hook` 1.39.0-2 or newer: that is the first build whose hooks leave a Mac's `/boot` to mkinitcpio until Limine is activated. With an older hook, Limine's kernel hook replaces mkinitcpio's by name, and this package's `limine-ready` gate stops it on a Mac that still boots GRUB, so a kernel update would never reach `/boot`.