v1.17.0 v1.0.2
kyutai-labs/hibiki-zeroSep 10, 2026 → Sep 11, 20260 days between releases
What's New
Agent Sandbox v1.0.2 adds Ed25519 verification, direct connectivity, and SDK improvements, while moving the sandbox router namespace.
Breaking Changes
- Sandbox Router Authorizer interface changed from `(namespace, name)` to `authz.AuthorizationTarget`
- Sandbox Router namespace moved from `default` to `agent-sandbox-system`
New Features
- Ed25519 scoped-token v2 verification
- Direct in-cluster connectivity via headless service DNS or Pod IP
- Connection resiliency tuning for Python SDK
- Warm pool adoption for RL training harnesses
- MCP Server Probes (healthz and readyz)
Improvements
- Improved Python SDK connection resiliency on 4xx errors
- Controller observability metrics via controller-runtime v0.25.0
- Warm Pool Adoption and OpenHands integration in RL framework
- Scoped-Token v2 Target Binding
- Security enhancements via Ed25519 verification
Upgrade Notes
Update custom Authorizer implementations to inspect the fields of `authz.AuthorizationTarget`. Update any manifests or scripts referencing the sandbox router to use the `agent-sandbox-system` namespace.
The Two Releases
Firecracker v1.17.0
Sep 10, 2026· 1 month ago
Adds support for Linux 6.18 guest kernels and AWS Graviton5 instances, along with performance improvements for vsock and new options for transparent huge pages and snapshot creation.
Full release notesv1.0.2
Sep 11, 2026· 1 month ago
This release brings significant improvements across the sandbox router, SDKs, and reinforcement learning integrations, including Ed25519-based scoped-token v2 verification, direct in-cluster connectivity for the Go SDK, improved connection resiliency for the Python SDK, and controller observability metrics via controller-runtime v0.25.0.
Full release notes