Agentic Sandbox v2026.8.4

Agentic Sandbox v2026.8.4

Released: 2026-08-20 Tag: `v2026.8.4` Previous published: `v2026.8.3` Compare: `v2026.8.3...v2026.8.4`

Highlights

  • An off-by-default Celld v0.2.1 integration baseline with durable,

generation-fenced, signed lifecycle intent.

  • Structured Celld behavior/UAT evidence that preserves `NOT_RUN` and keeps

automated qualification separate from operator-run soak and human UAT.

  • A provider-neutral S3-v1 qualification contract and pinned SeaweedFS

self-hosting candidate, added alongside existing local filesystems and volume mounts.

  • Client-safe managed-Docker identity posture for Cockpit and API consumers.
  • Refreshed provider CLI pins and a 10-job local Cargo cap for this 20-thread

workstation.

What changed

Celld integration now has versioned contracts, a durable effect ledger, authenticated and generation-bound command dispatch, rotation rules, static authority evidence, and a structured 17-scenario UAT catalog. The integration remains disabled unless explicitly configured. Deterministic checks establish the contract baseline; they do not substitute for the outstanding live fleet, fault, isolation, recovery, soak, or human evidence.

The storage work defines behavior rather than vendor identity. A candidate S3-compatible backend must prove atomic conditional create and overwrite, read-after-write behavior, isolation, cleanup, and latency against the exact qualified topology. SeaweedFS is the first pinned self-hosted candidate. Local filesystem storage and volume mounts remain supported and unchanged.

Managed Docker inventory now exposes whether retained control identity evidence is present and range-valid, whether the fixed workload boundary is separated, a stable reason code, and whether recreation is required. It never returns the host UDS path or raw control UID. New agentshare aliases under `/sandbox` give workloads a consistent workspace/inbox/outbox/comms layout. The VM-backed E2E harness also isolates the complete provider/test process tree from the Actions log pipe, reaps its scoped process group after completion, and applies a bounded inner test timeout, preventing a completed libvirt suite from stranding the runner during process teardown.

Upgrade

Upgrade `agentic-mgmt`, `agent-client`, and `agentic-cli` together. Recreate managed containers created before this release if Cockpit or another client must display affirmative split-identity evidence; old rows remain operable but are intentionally marked for recreation.

Linux package users can use the published installer:

curl -fsSLO https://github.com/jmagly/agentic-sandbox/releases/download/v2026.8.4/agentic-sandbox-install.sh
bash agentic-sandbox-install.sh --version v2026.8.4

Verify downloaded artifacts and public images using the release verification guide.

Qualification status

Celld is an experimental, off-by-default path in this release. The release does not claim production qualification. In particular:

  • live multi-node fleet, provider-fault, network-isolation, credential,

rollout, observability, and recovery evidence remains incomplete;

  • the SeaweedFS fixture is a candidate until its exact Titan behavior run is

green and retained;

  • `UAT-CELLD-016` (24-hour soak) and `UAT-CELLD-017` (human acceptance) remain

operator-run gates;

  • local filesystems and mounted volumes remain first-class storage options.

Rollback

Rollback should keep management, agent, and CLI binaries on one version. Disable Celld before rolling back its experimental integration. Containers using only the added `/sandbox/*` aliases retain the older agentshare paths, so workloads can switch back without migrating their underlying local storage.

Full notes: CHANGELOG entry 2026.8.4.