Agentic Sandbox v2026.6.21

Agentic Sandbox v2026.6.21

Superseded by `v2026.6.22`. The tag carried the fix and passed local

verification plus the Gitea test/security jobs, but the Gitea lint job failed

without a retrievable log file and could not be rerun through the installed

Gitea API.

Released: 2026-06-19 Tag: `v2026.6.21` Previous: `v2026.6.20` Compare: `v2026.6.20...v2026.6.21`

What This Release Is

v2026.6.21 supersedes v2026.6.20. It carries the normalized runtime bootstrap injection fix for Docker and VM deployments, plus the parallel-safe regression test fix required for the full tag CI suite.

Highlights

  • Docker v2 provisioning starts a managed container with canonical instance IDs,

management endpoint env, labels, mounts, and one-time bootstrap enrollment material.

  • Docker v1 provisioning issues bootstrap enrollment material when callers do

not provide mTLS, UDS, vsock, or bootstrap env.

  • The container entrypoint accepts bootstrap enrollment as secure first-start

material so `agent-rs` can enroll into mTLS.

  • VM deploy now fails closed if `agent.env` lacks bootstrap enrollment, mTLS,

UDS, or vsock material, or still contains retired `AGENT_SECRET` material.

  • The fake-Docker regression test is safe under the full parallel management

test suite.

Verification

cargo fmt --manifest-path management/Cargo.toml --check
cargo fmt --manifest-path agent-rs/Cargo.toml --check
cargo fmt --manifest-path cli/Cargo.toml --check
bash -n images/container/agent-entrypoint.sh
bash -n scripts/provision-vm-agent.sh
bash -n images/qemu/provision-vm.sh
cargo test --manifest-path management/Cargo.toml --lib
make test-unit
images/qemu/loadouts/tests/test_generate_from_manifest.sh
images/qemu/tests/test-cloud-init-secure-transport.sh