Agentic Sandbox v2026.6.30

Agentic Sandbox v2026.6.30

Released: 2026-06-23 Tag: `v2026.6.30` Previous: `v2026.6.29` Compare: `v2026.6.29...v2026.6.30`

What This Release Is

v2026.6.30 is a runtime-provisioning correctness release driven by the Cockpit live UAT matrix. It closes the v2 admin SSH-key passthrough gap that blocked VM provisioning, clarifies the opt-in host-runtime 501 so it reads as "disabled" rather than "unimplemented," and adds a capability signal plus a dedicated CI tier so harnesses can distinguish a skipped host tier from a failed one.

Highlights

  • VM provisioning honors a caller-supplied SSH key. The v2

`POST /api/v2/admin/instances` `ProvisionRequest` now accepts an optional `ssh_key`, and the qemu path forwards it to `provision-vm.sh` as `--ssh-key`, matching the v1 path. Previously the field was silently dropped and the script auto-detected from the management server's `$HOME/.ssh` (a narrower key set), failing with `No SSH public key found. Specify with --ssh-key` even though the Cockpit bridge already sends a validated key. When `ssh_key` is omitted, the auto-detect path is unchanged.

  • Host-runtime 501 is no longer misleading. The opt-in host runtime still

fail-closes with `501 runtime.not_implemented` when no supervisor is configured, but the detail now points at `AGENTIC_HOST_RUNTIME_ENABLED=1` and `docs/runtimes/host-supervisor.md` instead of citing the closed feature issue as pending work.

  • Capability signal for host opt-in. `GET /healthz/deep` now reports

`host_runtime_enabled`, so conformance/UAT harnesses can treat the host tier as skipped (not failed) when the supervisor is disabled, instead of inferring intent from a 501.

  • Dedicated Host Runtime CI tier. `.gitea/workflows/host-runtime.yml` boots

the server with the local supervisor enabled and asserts both `host_runtime_enabled: true` and that host provisioning is accepted (202) rather than fail-closed (501).

Fixes

  • `fix(runtime)`: forward `ssh_key` through v2 admin provision to

`provision-vm.sh` (agentic-sandbox#558).

  • `fix(runtime)`: clarify the host 501 detail and stop referencing the closed

host-target issue as a pending blocker (agentic-sandbox#555).

Docs

  • `docs/contracts/admin-api.openapi.yaml`: document the v2 provision `ssh_key`

field.

  • `docs/runtimes/host-supervisor.md`: document the `host_runtime_enabled`

capability signal and the Host Runtime CI tier.

Upgrade Notes

No breaking changes. `ssh_key` is optional and backwards compatible. Consumers that drive VM provisioning (e.g. the AIWG Cockpit bridge) already send `ssh_key`; this release makes the management server honor it. Re-run live provisioning matrices against this release to clear the host/docker/VM target failures observed on pre-v2026.6.29 builds.