v0.9.9 v1.0.2
kubernetes-sigs/agent-sandboxSep 10, 2026 → Sep 11, 20260 days between releases
What's New
Router namespace moved to agent-sandbox-system and Authorizer interface signature changed
Breaking Changes
- Sandbox Router Authorizer interface signature changed from (namespace, name) to authz.AuthorizationTarget
- Router manifests moved from default namespace to agent-sandbox-system
New Features
- Ed25519-based scoped-token v2 verification for fine-grained authorization
- Direct in-cluster connectivity options for Go SDK
- Warm pool adoption in RL SDK
- OpenHands integration and scalable multi-agent workflows
- Controller observability metrics via controller-runtime v0.25.0
Improvements
- Enhanced connection resiliency for Python SDK
- Scoped-Token v2 security verification
- Direct in-cluster connectivity options
- Controller observability metrics
- Warm pool adoption for efficiency
Upgrade Notes
Update custom Authorizer implementations to inspect the authz.AuthorizationTarget struct instead of separate namespace/name arguments. Update deployment manifests to target the agent-sandbox-system namespace. Verify Go SDK connectivity settings for in-cluster options.
The Two Releases
v0.9.9
Sep 10, 2026· 1 month ago
Adds Router9 and Septor Labs adapters. Fixes keyless platform routing to prevent wasting attempt budget. Adds response caching for streaming requests and `execution_id` to chat bodies.
Full release notesv1.0.2
Sep 11, 2026· 1 month ago
This release introduces significant security and performance upgrades, including Ed25519-based scoped-token v2 verification, direct in-cluster connectivity for the Go SDK, and enhanced resiliency for the Python SDK. It also adds warm pool adoption, OpenHands integration, and controller observability metrics via controller-runtime v0.25.0.
Full release notes