Agentic Sandbox v2026.7.14

Agentic Sandbox v2026.7.14

Released: 2026-07-28 Tag: `v2026.7.14` Previous published: `v2026.7.12` Compare: `v2026.7.12...v2026.7.14`

What this release is

A cumulative runtime, security, integration, and platform release. It includes the Apple Silicon work prepared for the deliberately skipped `v2026.7.13` candidate and every change since the last published release, `v2026.7.12`.

Highlights

  • Apple Silicon developer package. Native host and Docker Desktop support

ships in an explicitly unsigned `.pkg` promoted from an immutable, checksum-bound exact-commit preparation bundle. It is for developer evaluation while Developer ID and notarization credentials remain unavailable; it is not a production-trusted Apple package.

  • Cloud Hypervisor runtime. Checkpoint, fast-restore, isolated-fork,

agentshare, and managed GPU paths extend the runtime matrix while retaining libvirt support and adding libvirt checkpoint warm pools.

  • Hardened containers and certificates. Managed containers preserve mTLS

identity across restart, enforce tighter mount/capability/storage controls, and use pre-issuance workload identity checks; external CA providers now have a versioned conformance contract.

  • Read-only MCP management. An optional authenticated MCP endpoint exposes

scope-filtered sandbox inventory, sessions, and bounded output replay without enabling mutating tools.

  • Dedicated build01 CI. Routine builds and serialized VM E2E now use a

coherent runner, storage, cache, XFS agentshare, base-image, and reaper contract.

  • Host/runtime reliability. Session working directories, host restart and

shutdown adoption, agentshare quota paths, filesystem counters, and cloud-init readiness are preserved across the affected lifecycle paths.

  • Capacity evidence. A seven-day observability harness and baseline support

repeatable resource-trend and saturation checks.

Upgrade by audience

AudienceAction
Linux package usersInstall the new `.deb` or `.rpm` with the release installer. Restart `agentic-mgmt` and any host-runtime daemon after package replacement.
VM operatorsRedeploy `agent-client` into existing VMs or reprovision them. Review the Cloud Hypervisor/checkpoint host prerequisites before enabling those paths.
Container operatorsRecreate managed containers so the new image, security mounts, mTLS persistence, and storage boundary take effect.
MCP clientsNo action by default. To opt in, create a mode-`0600` `mcp-principals.toml`, set `enabled = true`, and configure least-privilege scope hashes.
Apple Silicon developersDownload the `developer-unsigned.pkg` only if an unsigned evaluation build is acceptable under local policy. Verify both checksum files and the developer evidence before installing.
Release verifiersUse `SHA256SUMS`, the Linux and macOS developer checksum manifests, GPG sidecars where present, and the exact-commit macOS developer evidence.

Install or upgrade

VERSION=v2026.7.14
BASE="https://github.com/jmagly/agentic-sandbox/releases/download/${VERSION}"

curl -fsSL "${BASE}/agentic-sandbox-install.sh" \
  | bash -s -- --version "${VERSION}" --dry-run

# Remove --dry-run only after reviewing the resolved package and checksum.
curl -fsSL "${BASE}/agentic-sandbox-install.sh" \
  | bash -s -- --version "${VERSION}"

Apple Silicon developer install

The `v2026.7.14` Apple Silicon package is unsigned, not notarized, and not stapled. It is intended for developers who can accept and review an unsigned installer. Do not install it on production systems. Do not disable Gatekeeper or remove quarantine attributes to force installation; if local policy rejects the package, build from source or wait for a signed release.

Download and verify the complete developer set before installing:

VERSION=v2026.7.14
BASE="https://github.com/jmagly/agentic-sandbox/releases/download/${VERSION}"
MAC_BASE="agentic-sandbox-${VERSION}-aarch64-darwin-developer-unsigned"

for asset in \
  "${MAC_BASE}.pkg" \
  "${MAC_BASE}.pkg.sha256" \
  "${MAC_BASE}.payload-manifest.tsv" \
  "${MAC_BASE}.evidence.json" \
  SHA256SUMS-macos-developer; do
  curl -fLO "${BASE}/${asset}"
done

shasum -a 256 -c SHA256SUMS-macos-developer
shasum -a 256 -c "${MAC_BASE}.pkg.sha256"
pkgutil --payload-files "${MAC_BASE}.pkg" | less
sudo installer -pkg "${MAC_BASE}.pkg" -target /

/usr/local/bin/sandboxctl --help

Installation places the four documented binaries and inert support assets under `/usr/local`; it does not start or enable a service.

Verification

VERSION=v2026.7.14
BASE="https://github.com/jmagly/agentic-sandbox/releases/download/${VERSION}"

curl -fLO "${BASE}/SHA256SUMS"
curl -fLO "${BASE}/SHA256SUMS-linux-packages"
curl -fLO "${BASE}/SHA256SUMS-macos-developer"

docker pull "ghcr.io/jmagly/agentic-sandbox-mgmt:${VERSION}"
docker run --rm --entrypoint /bin/sh \
  "ghcr.io/jmagly/agentic-sandbox-mgmt:${VERSION}" \
  -lc 'command -v agentic-mgmt >/dev/null'

Follow `verification.md` for package checksums, GPG fingerprint verification, GHCR images, installer dry-runs, unsigned Apple package inspection, and exact-commit developer-evidence validation.

Full notes: `CHANGELOG.md` `[2026.7.14]`.