Agentic Sandbox v2026.7.16

Released: 2026-07-30 Tag: `v2026.7.16` Previous published: `v2026.7.15`

What changed

This patch restores portable management builds by compiling the live libvirt admission probe only when the `linux-vm` feature is enabled. Portable builds continue to exercise the explicit degraded-admission test hook without calling Linux-only libvirt helpers.

Docker image CI now selects a runner by its Docker and Node capabilities, avoiding pre-checkout failures on minimal Linux runners while retaining the project runner policy. OpenAPI lint is also null-safe, and the structural router comparison includes the separately mounted MCP discovery endpoint.

Upgrade

Upgrade normally from `v2026.7.15`. No configuration or data migration is required for this patch.

Verify release artifacts against the published checksum manifests and follow the standard release verification guide.

Known security limits

This patch carries forward the v2026.7.15 transport boundaries:

• Operator-supplied Docker networks remain Tier 0.
• Transport acceptance criterion AC-1 remains blocked because containers use

management-issued mTLS material rather than a Unix-domain-socket-only path.

• Same-host-UID credential access remains tracked by #617 and is not resolved

by this patch.

• The Apple developer package is explicitly unsigned and evaluation-only. No

Developer ID, notarization, stapling, or Gatekeeper-trust claim is made.

Rollback

The previous release is `v2026.7.15`. Rolling back reintroduces the portable libvirt compile failure and the less-specific Docker runner selection.

Full notes: `CHANGELOG.md` `[2026.7.16]`.