Agentic Sandbox v2026.5.9

Released: 2026-05-22 Tag: `v2026.5.9` Previous: `v2026.5.8` (2026-05-22) Compare: `v2026.5.8...v2026.5.9`

Superseded: tag release E2E for v2026.5.9 failed while waiting for first-boot VM SSH readiness. Use v2026.5.10 or newer as the clean automation-control/TUI release.

What this release is

v2026.5.9 is the clean automation-control/TUI substrate release-gate patch.

It supersedes v2026.5.8. The v2026.5.8 tag created release artifacts, but tag E2E failed after surfacing two remaining VM readiness assumptions: first-boot SSH was bounded by a hardcoded 120s wait, and basic-profile VMs were waiting for an agentic-dev setup marker they do not create.

This release fixes those gates and makes disk-quota E2E enforcement conditional on actual host project-quota capability.

Highlights

Longer bounded first-boot wait: VM provisioning now waits up to 300s for

SSH by default and can be tuned with `AGENTIC_VM_SSH_WAIT_SECONDS` or `SSH_WAIT_SECONDS`.

Profile-aware readiness: basic VMs skip the extra profile setup gate unless

`/opt/agentic-setup/check-ready.sh` exists.

Quota capability detection: disk quota E2E skips on hosts without XFS

project quotas instead of performing an unbounded large write.

Local VM validation: this host completed local E2E with `25 passed, 4

skipped`, including stdout streaming, agent registration, concurrency, resource limits, server health, and stdin routing.

Verification

Local verification before release prep:

bash -n images/qemu/provision-vm.sh
python3 -m py_compile tests/e2e/test_resource_limits.py
env E2E_CLEANUP_VM=1 AGENTIC_VM_SSH_WAIT_SECONDS=300 \
  E2E_VM_READY_TIMEOUT=360 ./scripts/run-e2e-tests.sh
# 25 passed, 4 skipped

Main and tag CI remain the release source of truth. The v2026.5.9 tag was superseded by v2026.5.10 after tag E2E failed while waiting for first-boot VM SSH readiness.

Issues closed

#356.
#357.

Full change log

See [`CHANGELOG.md` `[2026.5.9]`](../../CHANGELOG.md#202659-2026-05-22) for the categorized breakdown.