Agentic Sandbox v2026.7.18

Agentic Sandbox v2026.7.18

Released: 2026-07-31 Tag: `v2026.7.18` Previous published: `v2026.7.17`

What changed

Managed runtime inventory now publishes the interactive working directory that belongs to each target. Host targets retain the resolved provisioned directory; container and VM targets report `/home/agent`. Consumers such as AIWG Cockpit can therefore start provider processes in the target's own workspace instead of guessing from the control-plane host.

The production container image also declares `HOME=/home/agent`, `USER=agent`, and `WORKDIR /home/agent`. Management continues to enforce the numeric non-root runtime identity (`uid 10001`) at launch, so direct and managed container sessions receive the same filesystem defaults without relying on a test-only environment override.

Docker image construction is pinned to the dedicated `s9-build`/build01 runner. The runner-policy lint now rejects ambiguous capability selectors that could schedule project work on teroknor.

Upgrade

Upgrade the management service, agent, CLI, and provider images from `v2026.7.17` to `v2026.7.18`. Recreate provider containers so they receive the new image-level home and working-directory defaults. No data migration is required.

Verify release artifacts against the published checksum manifests and follow the standard release verification guide.

Known security limits

  • Operator-supplied Docker networks remain Tier 0.
  • Transport acceptance criterion AC-1 remains blocked because containers use

management-issued mTLS material rather than a Unix-domain-socket-only path.

  • Workload and agent processes still share `uid 10001`; credential separation

remains tracked by #617.

  • The Apple developer package is explicitly unsigned and evaluation-only. No

Developer ID, notarization, stapling, or Gatekeeper-trust claim is made.

Rollback

The previous release is `v2026.7.17`. Rolling back removes target-native cwd metadata and the image-level non-root home defaults; consumers may fall back to their compatibility directory selection.

Full notes: `CHANGELOG.md` `[2026.7.18]`.