Agentic Sandbox v2026.6.25

Agentic Sandbox v2026.6.25

Released: 2026-06-20 Tag: `v2026.6.25` Previous: `v2026.6.24` Compare: `v2026.6.24...v2026.6.25`

What This Release Is

v2026.6.25 supersedes v2026.6.24 for the container and host bootstrap quick paths. It carries the verification and diagnostics needed for bootstrap-enrolled agents to register through the static-cert gRPC mTLS listener, and it makes the admin v2 fleet surface report transport posture and host-daemon status for bridge consumers.

Highlights

  • Static-cert gRPC mTLS now has regression coverage proving bootstrap CSR-issued

client certificates are accepted and their SPIFFE URI-SAN identity is authorized through `AgentService::connect`.

  • Bootstrap-enrolled agents are authorized by the mTLS SPIFFE URI-SAN and must

present matching `x-agent-instance-id` metadata.

  • Admin v2 instance objects now include `transport`, `transport_posture`,

structured `security_posture`, and host-runtime `host_daemon` status. Cockpit and other fleet bridges can render secure host-backed instances without falling back to `Unknown transport`.

  • `GET /` now returns a stable management health payload for simple root-path

load-balancer and operator probes.

  • `agent-client` logs the full connect/stream error cause chain, preserving TLS

alerts and tonic transport causes for operator debugging.

  • Terminal transport benchmarking now has a repeatable harness and dated

artifacts covering gRPC PTY, binary `pty-ws`, SSH, SSH ControlMaster, tmux, Mosh, ttyd/GoTTY, and Kubernetes-style exec. The evidence qualifies, rather than overstates, faster/lighter-than-SSH claims.

  • Gateway-mediated SSH access is documented as a first-class access option with

different semantics from `pty-ws`, not an unmanaged fallback.

  • Development docs now distinguish the Docker-reachable mTLS endpoint from the

Docker-reachable HTTP bootstrap enrollment endpoint.

  • Launch-review documentation now includes the security posture matrix,

credential posture decision, and attack-surface inventory for qualified external claims.

Verification

cargo test 'grpc_mtls_static' --manifest-path management/Cargo.toml
cargo test --manifest-path management/Cargo.toml --bin agentic-mgmt
cargo test --manifest-path agent-rs/Cargo.toml
(cd management && cargo test --lib)
python3 -m py_compile scripts/benchmark-terminal-transports.py
python3 scripts/benchmark-terminal-transports.py --out-dir .aiwg/testing --prefix terminal-transport-benchmark-2026-06-19

Live smoke proof used an isolated management server on high ports with a Docker-reachable HTTP bootstrap endpoint and static gRPC mTLS listener. The agent materialized enrolled mTLS credentials, rustls reached client auth, connected over mTLS, registered successfully, and continued sending metrics.

Operator Notes

  • Use `v2026.6.25` for bootstrap mTLS peer-identity diagnostics and the admin

v2 transport posture fields required by Cockpit and other fleet bridges.

  • Terminal performance claims remain qualified until fixture-backed benchmark

runs replace the simulated baseline rows.