Agentic Sandbox v2026.6.7

Agentic Sandbox v2026.6.7

Released: 2026-06-16 Tag: `v2026.6.7` Previous: `v2026.6.6` (2026-06-15) Compare: `v2026.6.6...v2026.6.7`

What this release is

v2026.6.7 is the CA backend lifecycle and direct-release-flow patch. It keeps the packaged release pipeline from `v2026.6.6` and adds the local-first gRPC mTLS CA backend boundary needed for workstation and distributed fleet certificate lifecycle work.

Highlights

  • Local workstation CA backend (#492): management defaults to the embedded

local CA, stores root material under the configured secrets directory, renews leaves according to the configured renewal window, and keeps SPIFFE-shaped agent identities bound to expected instance IDs.

  • Remote CA boundary (#493): `AGENTIC_GRPC_CA_BACKEND=remote` fails closed

until an operator-approved provider adapter exists, while `remote-mock` exercises the integration boundary for tests and runbooks.

  • Bootstrap enrollment continuity: single-use bootstrap tokens still gate

in-agent CSRs, and signing rejects URI-SAN mismatch, common names, expired tokens, and unsupported CA backends.

  • Direct CalVer release flow: `.aiwg/release.config` now records the local

checks, code-to-docs gate, Gitea workflow gate, tag publishing, and release asset verification expected for direct delivery.

Operator notes

  • Workstation/local deployments use `AGENTIC_GRPC_CA_BACKEND=local` by default.
  • Rotate the local root by stopping provisioning, replacing

`<SECRETS_DIR>/grpc-local-ca`, removing stale per-agent leaves under `<SECRETS_DIR>/grpc-mtls`, restarting management if the mTLS listener trusts the old CA, and reprovisioning agents.

  • Use `AGENTIC_GRPC_CA_BACKEND=remote` to verify fail-closed startup behavior.

Use `remote-mock` for provider-boundary tests without OpenBao, step-ca, or SPIRE.

Verification

Local release-prep checks:

python3 scripts/check-doc-links.py --docs-root docs
scripts/lint-ci-pins.sh
scripts/lint-npm-pins.sh
scripts/bump-version.sh 2026.6.7
cargo test --manifest-path management/Cargo.toml --lib

Post-tag publication proof:

scripts/verify-release-assets.sh v2026.6.7
  • #492 - workstation/local CA backend for user-space secure agent transport.
  • #493 - remote CA backend for distributed agent fleet certificate lifecycle.