Agentic Sandbox v2026.6.0

Agentic Sandbox v2026.6.0

Released: 2026-06-11 Tag: `v2026.6.0` Previous: `v2026.5.17` (2026-05-24) Compare: `v2026.5.17...v2026.6.0`

What this release is

v2026.6.0 is the June feature release and the largest functional cut since the v2026.5.x line began: 84 commits that complete the Rust E2E migration, retire the legacy pytest harness entirely, and harden the CI lane that produces release evidence so it can recover itself from the runner failures that repeatedly stalled the 5.x line.

It also carries a license change: the repository is now AGPL-3.0-only.

Highlights

  • Rust E2E migration complete (#302): server health, agent registration,

command dispatch, concurrency, agent info, WebSocket connect parity, and the full VM-backed resource-limit family (memory, FDs, IO throttle, agentshare write/quota, nonzero exit, PID stress) now run as Rust-native suites. The `tests/e2e` pytest harness is removed and the E2E gate is Rust-only.

  • Two new conformance tiers: a live-agent integration tier (#281)

covering terminal states, HITL prompt/response (including invalid-response `422`), and bounded `adapter-command/v1` — synthetic fixtures only — plus a restart-durability tier (#283) backed by a deterministic PTY bridge (#282).

  • Self-healing CI lane (#335): the titan Docker preflight detects a

wedged `dockerd` with a bounded probe, restarts it in-job, and fails fast instead of hanging; the VM-backed E2E step is bounded by an effective in-step shell timeout, and stale `agentic-e2e-*` VMs are reaped before every integration run. The 3.5-hour silent lane hangs of the 5.x line are structurally closed.

  • AGPL-3.0-only licensing (#372) across repository documentation and

Rust crate metadata.

  • Management durability and observability: systemd notify watchdog

(#275), bounded libvirt VM operations, poisoned-mission quarantine on resync, mission correlation through dispatch logs, backpressure metrics, libvirt RPC timings, and PTY session-resize tracing (#188).

  • CLI attach on `pty-ws/v1` (#254), TUI redraw stabilization (#353,

#373), and browser-QA carbonyl session persistence (#318).

  • Transport security groundwork: the agent transport security plan and

its ADR gate are accepted, with rustls hot-reload and native vsock spikes landed. No transport behavior changes ship in this release; implementation is deliberately deferred.

Upgrade matrix

AudienceImpact
Downstream consumers / packagersLicense is now AGPL-3.0-only (#372). Review obligations before redistribution.
Operators running the management serverBinaries bump to `2026.6.0`; systemd notify watchdog is active for `management`; no API contract changes for v1/v2 clients.
CI / test tooling authors`tests/e2e/` no longer exists. Target the Rust suites under `management/tests/` (run with `AGENTIC_RUN_RUST_E2E=1`).
CLI users`sandboxctl attach` now speaks `pty-ws/v1`; legacy attach paths are retired (#254).
Release operatorsRelease-critical tag jobs remain on the `titan` lane (unchanged from v2026.5.17); runner substrate tracking continues in #363/#367.

Verification

Local release-prep checks:

git diff --check
make lint
cargo pkgid --manifest-path management/Cargo.toml   # ...#2026.6.0
cargo pkgid --manifest-path agent-rs/Cargo.toml     # ...#2026.6.0
cargo pkgid --manifest-path cli/Cargo.toml          # ...#2026.6.0
python3 scripts/check-doc-links.py --docs-root docs

Runtime spot-checks after upgrade:

# Rust E2E (host with libvirt + the agent binary built):
cd management && AGENTIC_RUN_RUST_E2E=1 cargo test --test e2e_server_health -- --nocapture

# Watchdog active on an installed management unit:
systemctl show <management-unit> -p WatchdogUSec

The tag should be cut only after branch CI is green on the release-prep commit. Tag CI remains the release source of truth for publication (artifacts, crates.io, registry mirror, SBOM/signing, GitHub release sync).

Issues closed

  • #302 — port the pytest E2E harness to Rust integration tests (epic for the

suite slices listed above).

  • #281 — live-agent conformance integration tier.
  • #283 — restart-durability conformance tier.
  • #188 — PTY/WS/libvirt observability instrumentation epic.
  • #196 — documentation gap follow-through (strict docs link validation).
  • #254 — CLI attach migration to `pty-ws/v1`.
  • #275 — management watchdog enablement (drill follow-up tracked in-issue).
  • #335 — Docker Build & Publish runner lane failures (self-heal + fail-fast).
  • #372 — AGPL root license and package metadata.
  • #363 / #367 remain open for titan runner-lane isolation and VM substrate

drift tracking (policy decision: repo-local mitigations only).

  • #409 (UDS/vsock/mTLS transport implementation) remains deliberately

deferred; this release ships only its accepted design plan and spikes.