Agentic Sandbox v2026.6.4

Agentic Sandbox v2026.6.4

Released: 2026-06-15 Tag: `v2026.6.4` Previous: `v2026.6.3` (2026-06-15) Compare: `v2026.6.3...v2026.6.4`

What this release is

v2026.6.4 is the packaged release pipeline cut with the GHCR namespace fix needed for publication from Gitea Actions. It keeps the native package, installer, GHCR, and mutsu release scope from `v2026.6.3`, but publishes public container packages under the GitHub package namespace.

Highlights

  • Native Linux packages (#479): tag CI builds `.deb` and `.rpm` assets for

x86_64 Linux with package-managed binaries, env templates, and systemd units.

  • Checksum-verifying installer (#480): `agentic-sandbox-install.sh`

resolves latest or pinned releases, verifies package checksums, supports local package validation, and smoke-checks installed commands.

  • Public GHCR packages (#478): release CI mirrors the runtime image set to

`ghcr.io/${GHCR_OWNER:-jmagly}/agentic-sandbox-*`, including `automation-control`, and smoke-pulls management and agent-client images by version tag.

  • Apple Silicon host-direct release path (#481): mutsu SSH builds are

release-blocking and smoke-test the `aarch64-darwin` tarball for `sandboxctl` and `agent-client`.

Operator notes

  • Treat `v2026.6.2` and `v2026.6.3` as superseded release-attempt tags.
  • Use `v2026.6.4` for packaged release assets and GHCR image tags.
  • Production tag releases require both `GHCR_TOKEN` and `MUTSU_SSH_KEY`.
  • Set repository variable `GHCR_OWNER` only if the GHCR namespace changes from

the default `jmagly`.

Verification

Local release-prep checks:

git diff --check
cargo pkgid --manifest-path management/Cargo.toml   # ...#2026.6.4
cargo pkgid --manifest-path agent-rs/Cargo.toml     # ...#2026.6.4
cargo pkgid --manifest-path cli/Cargo.toml          # ...#2026.6.4
tests/release/test-ghcr-matrix.sh
tests/package/test-install-script.sh
tests/package/smoke-linux-packages.sh --required

Post-tag publication proof:

scripts/verify-release-assets.sh v2026.6.4
  • #478 closes only after tag CI proves GHCR publication and smoke checks.
  • #479 closes only after tag CI attaches native package assets and checksums.
  • #480 closes only after the installer is verified from a real GitHub mirror

release URL.

  • #481 closes only after tag CI proves the mutsu Apple Silicon host-direct

tarball smoke.

  • #462 closes after the release matrix proof for #478, #479, #480, and #481 is

captured.