Agentic Sandbox v2026.6.8

Agentic Sandbox v2026.6.8

Released: 2026-06-16 Tag: `v2026.6.8` Previous: `v2026.6.7` (2026-06-16) Compare: `v2026.6.7...v2026.6.8`

What this release is

v2026.6.8 is the release-attempt replacement for `v2026.6.7`. It preserves the CA backend lifecycle and direct-release-flow content, and fixes the mutsu SSH build lane that failed to find `rustup` during Apple Silicon release artifact publication.

Highlights

  • CA backend lifecycle (#492/#493): same local-first gRPC mTLS CA backend,

fail-closed remote boundary, and bootstrap CSR enrollment behavior introduced in `v2026.6.7`.

  • Mutsu Rust tooling resolution (#481): the SSH build now expands `PATH`

across the external cargo home, the automation user's cargo home, Homebrew, and the cached stable toolchain path before invoking Rust tools.

  • Clear mutsu diagnostics: the release job prints resolved `rustup`,

`cargo`, `rustc`, and version information before building; if `rustup` is not available, it only proceeds when `rustc` can already resolve the target standard library.

Operator notes

  • Treat `v2026.6.7` as a superseded release-attempt tag.
  • Use `v2026.6.8` for the CA backend lifecycle and direct release-flow release.
  • The expected production release proof remains the tag CI pipeline plus:
scripts/verify-release-assets.sh v2026.6.8
  • #492 - workstation/local CA backend for user-space secure agent transport.
  • #493 - remote CA backend for distributed agent fleet certificate lifecycle.
  • #481 - Apple Silicon host-direct release path.