Agentic Sandbox v2026.7.13

Prepared: 2026-07-25 Status: Skipped before tagging; changes roll forward into `v2026.7.14` Anticipated tag: `v2026.7.13` (not created) Previous published: `v2026.7.12` Candidate commit: `086f9ff` Candidate compare: `v2026.7.12...086f9ff`

What this candidate was

This candidate prepared the first production Apple Silicon host-and-Docker Desktop installer release. It was not tagged or published because the required separately witnessed Developer ID and Apple notarization ceremony was not completed for its exact source commit. The work is retained here as release history and is included in the cumulative `v2026.7.14` release.

Highlights

• Native Apple Silicon package with `agentic-mgmt`,

`agentic-host-runtime-daemon`, `sandboxctl`, and `agent-client`.

• Exact Developer ID Application and Installer identity selection, hardened

runtime, trusted timestamps, and a closed no-extra-entitlements policy.

• Signed and stapled Installer package inside a signed, notarized, stapled,

Gatekeeper-accepted DMG.

• Closed sanitized evidence binding the source commit, tag, operator approval,

preview package and manifest, signed payload, final artifacts, and public verification results.

• Immutable mutsu handoff consumed by a non-skippable production-tag job before

Gitea publication and GitHub mirroring.

• Public-core/private-enterprise composition boundary and exact public

conformance pin for licensed adapters.

Supported macOS scope

Apple Silicon only. Native host execution and Docker Desktop are supported. Intel Mac, libvirt/KVM, QEMU/Cloud Hypervisor, VFIO/GPU passthrough, and Apple `container` are not included in this package.

Verification

Download the `.pkg`, `.dmg`, checksum sidecars, `SHA256SUMS-macos`, payload manifest, and release evidence from the release. Verify the checksums, then use `pkgutil`, `codesign`, `spctl`, and `xcrun stapler validate` as documented in `docs/releases/macos-signing-ceremony.md`.

Full notes: `CHANGELOG.md` `[2026.7.13]`.