v2.6.0

> **Security notice (2026-10-04):** `v2.6.0` is affected by [GHSA-vqpg-pvjj-4cmq](https://github.com/Osmantic/ODS/security/advisories/GHSA-vqpg-pvjj-4cmq) (critical) and [GHSA-v3hj-52g2-2hmc](https://github.com/Osmantic/ODS/security/advisories/GHSA-v3hj-52g2-2hmc) (high). Both are fixed on `main`. To update an existing installation, follow [Updating an existing installation](https://github.com/Osmantic/ODS/blob/main/ods/SECURITY.md#updating-an-existing-installation).

## ODS 2.6.0

ODS 2.6.0 updates the stable line with remote-provider support, Model Switchboard and context selection, GPU reassignment rollback, rootless Linux repair, Windows/macOS native-runtime fixes, dashboard polish, and security hardening.

### Highlights

- Remote provider direct/SSH egress, tunnel supervision, dashboard status, and peer model operations.
- Model Switchboard stable routing and verified context propagation across LLM applications.
- Verified NVIDIA and Linux AMD/ROCm GPU reassignment with rollback.
- Rootless Docker bind-mount ownership repair for Linux installs.
- Windows native llama-server metrics and reasoning flags, plus safer Lemonade stale-PID handling.
- Remote-provider DNS-rebinding/SSRF hardening through validated address pinning with preserved TLS identity.

### Stable refs

- Release tag: `v2.6.0`
- Stable patch lane: `release/2.6.x`
- Release-stamp commit: `f461b3e5e6e3f21077eefb6ca39bc49a2f0b0838`

### Validation

- Product candidate: `07e2a21e3ccab197360009ebd3d66b4e6d4d0af2`
- Base product commit: `c292e00d5b60f6e4e6b331b2867346f9e9748a2c`
- Gate result: green through six-host full-model finalize; strict User Green is not claimed because the long six-cycle model-management matrix was intentionally waived.
- Release-prep fleet run id: `2026-07-28T12-58-00Z-release-product-07e2a21e3cca-harness-19d43e6f9f25-hosts-tower2-strix-halo-spark-m5-mbp-windows-laptop-strixy`
- Passed: regressions `16/16`, zero-prereq bootstrap `6/6`, fresh install, verify, cloud-mode contracts, dashboard, Hermes, UI policy, capabilities, lifecycle reinstall/restart, `ods doctor`, and full-model finalize across Tower2, Strix Halo, Spark, M5 MacBook Pro, Windows laptop, and Strixy.
- Known skipped/deferred surfaces: `dgx-gpu01` excluded for unverified SSH host key; full model-management matrix intentionally stopped after cycle 1 passed on `tower2` and `strix-halo`.

See `ods/CHANGELOG.md` and `ods/docs/RELEASE_NOTES_2.6.0.md` for the full release notes and validation receipt.