Agentic Sandbox v2026.6.13

Agentic Sandbox v2026.6.13

Released: 2026-06-16 Tag: `v2026.6.13` Previous: `v2026.6.12`

What This Release Is

v2026.6.13 is the direct-delivery CalVer release-flow cut for the local-first secure agent transport work. It preserves the workstation local CA backend, remote CA backend boundary, deterministic renewal tests, and target-typed PTY ioctl fix, then removes the fragile extra mutsu SSH hop from the Apple Silicon release smoke path.

Highlights

  • Darwin binaries are executed on mutsu inside the same SSH session used for

the native aarch64 build.

  • The final Darwin tarball is verified locally for executable payloads,

`MGMT_EXCLUDED.txt`, and arm64 Mach-O file identity.

  • The release flow still builds the full x86_64 Linux, aarch64 Linux, and

aarch64 Darwin artifact matrix before publication.

Operator Notes

  • Treat `v2026.6.7` through `v2026.6.12` as superseded release-attempt tags.

`v2026.6.13` is the intended release-flow cut.

  • Tag CI remains the publication source of truth for release assets, package

artifacts, container tags, SBOM/signing, and release mirroring.

Verification

Release-prep checks:

scripts/lint-ci-pins.sh
git diff --check
cargo pkgid --manifest-path management/Cargo.toml
cargo pkgid --manifest-path agent-rs/Cargo.toml
cargo pkgid --manifest-path cli/Cargo.toml
python3 scripts/check-doc-links.py --docs-root docs

Post-publication verification:

scripts/verify-release-assets.sh v2026.6.13 --skip-ghcr