Agentic Sandbox v2026.6.3

Agentic Sandbox v2026.6.3

Released: 2026-06-15 Tag: `v2026.6.3` Previous: `v2026.6.2` (2026-06-14) Compare: `v2026.6.2...v2026.6.3`

What this release is

v2026.6.3 is the packaged release pipeline cut under a fresh release tag. It keeps the `v2026.6.2` package, installer, GHCR, and mutsu release scope, but uses a new signed tag because the original tag workflow started before release-blocking secrets were available and this Gitea version does not expose cancel, rerun, or dispatch Actions APIs.

Highlights

  • Native Linux packages (#479): tag CI builds `.deb` and `.rpm` assets for

x86_64 Linux with package-managed binaries, env templates, and systemd units.

  • Checksum-verifying installer (#480): `agentic-sandbox-install.sh`

resolves latest or pinned releases, verifies package checksums, supports local package validation, and smoke-checks installed commands.

  • Public GHCR packages (#478): release CI mirrors the runtime image set to

`ghcr.io/<owner>/agentic-sandbox-*`, including `automation-control`, and smoke-pulls management and agent-client images by version tag.

  • Apple Silicon host-direct release path (#481): mutsu SSH builds are

release-blocking and smoke-test the `aarch64-darwin` tarball for `sandboxctl` and `agent-client`.

Operator notes

  • Treat `v2026.6.2` as a superseded release-attempt tag.
  • Use `v2026.6.3` for packaged release assets and GHCR image tags.
  • Production tag releases require both `GHCR_TOKEN` and `MUTSU_SSH_KEY`.

Verification

Local release-prep checks:

git diff --check
cargo pkgid --manifest-path management/Cargo.toml   # ...#2026.6.3
cargo pkgid --manifest-path agent-rs/Cargo.toml     # ...#2026.6.3
cargo pkgid --manifest-path cli/Cargo.toml          # ...#2026.6.3
tests/release/test-ghcr-matrix.sh
tests/package/test-install-script.sh
tests/package/smoke-linux-packages.sh --required

Post-tag publication proof:

scripts/verify-release-assets.sh v2026.6.3
  • #478 closes only after tag CI proves GHCR publication and smoke checks.
  • #479 closes only after tag CI attaches native package assets and checksums.
  • #480 closes only after the installer is verified from a real GitHub mirror

release URL.

  • #481 closes only after tag CI proves the mutsu Apple Silicon host-direct

tarball smoke.

  • #462 closes after the release matrix proof for #478, #479, #480, and #481 is

captured.