Agentic Sandbox v2026.6.9

Agentic Sandbox v2026.6.9

Released: 2026-06-16 Tag: `v2026.6.9` Previous: `v2026.6.8` (2026-06-16) Compare: `v2026.6.8...v2026.6.9`

What this release is

v2026.6.9 is the release-attempt replacement for `v2026.6.8`. It preserves the CA backend lifecycle, direct-release-flow config, and mutsu Rust tooling resolution, and fixes the Darwin `agent-client` build surfaced by the Apple Silicon release lane.

Highlights

  • Darwin PTY ioctl portability (#481): `agent-client` now casts

`libc::TIOCSCTTY` to `libc::c_ulong` before calling `libc::ioctl`, matching the Darwin libc request type while preserving Linux behavior.

  • Mutsu release lane retained: the mutsu SSH build still prints remote Rust

tooling diagnostics and resolves Rust from external cargo, Homebrew, or the automation user's cargo home.

  • CA backend lifecycle retained (#492/#493): this remains the local-first

gRPC mTLS CA backend release.

Operator notes

  • Treat `v2026.6.8` as a superseded release-attempt tag.
  • Use `v2026.6.9` for the CA backend lifecycle and direct release-flow release.
  • The expected production release proof remains the tag CI pipeline plus:
scripts/verify-release-assets.sh v2026.6.9
  • #492 - workstation/local CA backend for user-space secure agent transport.
  • #493 - remote CA backend for distributed agent fleet certificate lifecycle.
  • #481 - Apple Silicon host-direct release path.