Agentic Sandbox v2026.6.23

Agentic Sandbox v2026.6.23

Superseded by `v2026.6.24`. The tag carried the Docker/VM bootstrap and

SSH-readiness fixes, but the Docker provider images still lacked the

normalized Claude control helpers required for the requested live managed

Claude session path.

Released: 2026-06-19 Tag: `v2026.6.23` Previous: `v2026.6.22` Compare: `v2026.6.22...v2026.6.23`

What This Release Is

v2026.6.23 supersedes v2026.6.22. It carries the normalized runtime bootstrap injection fix for Docker and VM deployments, plus the VM E2E SSH readiness retry needed after the v2026.6.22 tag workflow hit a transient shared-VM SSH gap in the resource-stress test.

Highlights

  • Docker v2 provisioning starts a managed container with canonical instance IDs,

management endpoint env, labels, mounts, and one-time bootstrap enrollment material.

  • Docker v1 provisioning issues bootstrap enrollment material when callers do

not provide mTLS, UDS, vsock, or bootstrap env.

  • The container entrypoint accepts bootstrap enrollment as secure first-start

material so `agent-rs` can enroll into mTLS.

  • VM deploy now fails closed if `agent.env` lacks bootstrap enrollment, mTLS,

UDS, or vsock material, or still contains retired `AGENT_SECRET` material.

  • VM-backed Rust E2E target discovery waits for SSH readiness before declaring

the VM unavailable. The timeout defaults to 60 seconds and can be adjusted with `AGENTIC_RUST_VM_E2E_SSH_READY_SECONDS`.

Verification

make lint
python3 scripts/check-doc-links.py --docs-root docs
git diff --check
env CARGO_BUILD_JOBS=10 make test-unit
env CARGO_BUILD_JOBS=10 cargo test --manifest-path management/Cargo.toml --test e2e_resource_limits -- --nocapture