Agentic Sandbox v2026.8.6

Agentic Sandbox v2026.8.6

Released: 2026-08-29 Tag: `v2026.8.6` Previous tag: `v2026.8.5` Compare: `v2026.8.5...v2026.8.6`

What changed

This patch completes the Gitea Runner 3 rollout for the qualified Linux build fleet. Build01 and Titan now use checksum-pinned Gitea Runner 3.3.1 binaries, cache service v2, and artifact v4. Titan retains its historical executable name for service compatibility, but both executable paths resolve to the same verified runner release.

The release also incorporates the Celld live-qualification fixes accumulated since v2026.8.5. Response-loss, recovery, cleanup, private transport, authenticated readiness, migration, and retained-evidence paths now fail more deterministically and preserve actionable diagnostics.

Branch validation and tag publication are separated, and long Docker, BuildKit, registry-smoke, and resource-stress operations have explicit bounds. The complete release path was exercised against the upgraded Gitea instance, including Linux builds, macOS validation, artifact v4 upload, image publication, and the aiwg.io production deployment.

Highlights

  • Gitea Runner 3.3.1 on the qualified Linux runners, installed from pinned

upstream binaries with SHA-256 verification.

  • Stock `actions/cache@v4`, `actions/upload-artifact@v4`, and

`actions/download-artifact@v4` compatibility.

  • Hardened Celld live qualification and cleanup behavior.
  • Bounded multi-platform build and registry verification operations.
  • Separate main-branch CI and protected tag-release workflows.

Upgrade

Upgrade `agentic-mgmt`, `agent-client`, and `agentic-cli` together:

curl -fsSLO https://github.com/jmagly/agentic-sandbox/releases/download/v2026.8.6/agentic-sandbox-install.sh
bash agentic-sandbox-install.sh --version v2026.8.6

Verify downloaded artifacts and public images using the release verification guide.

Operator notes

  • Confirm every runner reports `v3.3.1` before enabling artifact v4 workflows.
  • No persisted-state migration is performed by this patch.
  • Celld remains experimental, off by default, and production `NO-GO` pending

the separately retained live evidence, soak, and human acceptance gates.

Rollback

Rollback management, agent, and CLI binaries together to v2026.8.5. Runner rollback is independent of application rollback; if required, restore the previous service binary and restart the runner only after active jobs drain.

Full notes: CHANGELOG entry 2026.8.6.