Agentic Sandbox v2026.6.2

Released: 2026-06-14 Tag: `v2026.6.2` Previous: `v2026.6.1` (2026-06-14) Compare: `v2026.6.1...v2026.6.2`

---

What this release is

v2026.6.2 is the packaged release pipeline cut. It moves release publication from raw tarballs plus internal registry images toward a formal operator distribution surface: native Linux packages, a checksum-verifying installer, public GHCR runtime images, and fail-closed Apple Silicon host-direct builds.

Highlights

• Native Linux packages (#479): tag CI builds `.deb` and `.rpm` assets for

x86_64 Linux with package-managed binaries, env templates, and systemd units.

• Checksum-verifying installer (#480): `agentic-sandbox-install.sh` resolves

latest or pinned releases, verifies package checksums, supports local package validation, and smoke-checks installed commands.

• Public GHCR packages (#478): release CI mirrors the runtime image set to

`ghcr.io/<owner>/agentic-sandbox-*`, including `automation-control`, and smoke-pulls management and agent-client images by version tag.

• Apple Silicon host-direct release path (#481): mutsu SSH builds are

release-blocking and smoke-test the `aarch64-darwin` tarball for `sandboxctl` and `agent-client`.

• Windows decision recorded (#482): Windows installers are deferred from

the current release matrix until a supported component surface and pinned Windows builder/smoke lane exist.

Upgrade matrix

Audience	Impact
Linux operators	Prefer the installer or native `.deb`/`.rpm` packages over tarball unpacking when release assets are available.
Container users	Pull versioned GHCR images for reproducible deployments instead of relying on internal registry tags.
Apple Silicon users	Use Docker or the host-direct `aarch64-darwin` tarball for CLI/agent workflows. Apple VM/provider packaging remains deferred.
Release operators	`GHCR_TOKEN` and `MUTSU_SSH_KEY` are release-blocking for production tags. Tag CI must prove package, GHCR, installer, and mutsu outputs before closing the release issues.

Package install and upgrade

Use the checksum-verifying installer:

curl -fsSL https://github.com/jmagly/agentic-sandbox/releases/download/v2026.6.2/agentic-sandbox-install.sh \
  | bash -s -- --version v2026.6.2

Direct package installs are also supported:

sudo apt-get install ./agentic-sandbox_2026.6.2-1_amd64.deb
sudo dnf install ./agentic-sandbox-2026.6.2-1.x86_64.rpm

Public container packages

Pull the GHCR version tags:

docker pull ghcr.io/<owner>/agentic-sandbox-mgmt:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-agent-client:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-agent:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-claude:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-codex:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-opencode:v2026.6.2
docker pull ghcr.io/<owner>/agentic-sandbox-automation-control:v2026.6.2

Verification

Local release-prep checks:

git diff --check
cargo pkgid --manifest-path management/Cargo.toml   # ...#2026.6.2
cargo pkgid --manifest-path agent-rs/Cargo.toml     # ...#2026.6.2
cargo pkgid --manifest-path cli/Cargo.toml          # ...#2026.6.2
tests/release/test-ghcr-matrix.sh
tests/package/test-install-script.sh
tests/package/smoke-linux-packages.sh --required

Post-tag publication proof:

scripts/verify-release-assets.sh v2026.6.2

Issues closed

• #482 - Windows installer parity decision recorded as deferred for the current

release matrix.

Related issues

• #478 closes only after tag CI proves GHCR publication and smoke checks.
• #479 closes only after tag CI attaches native package assets and checksums.
• #480 closes only after the installer is verified from a real GitHub mirror

release URL.

• #481 closes only after tag CI proves the mutsu Apple Silicon host-direct

tarball smoke.

• #462 closes after the release matrix proof for #478, #479, #480, and #481 is

captured.