Go modules · #521 by repository stars

github.com/agent-substrate/substrate

v0.4.0agent-substrate/substrate ↗New releases in your daily digest, changelog included.

Last release today
09 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Nearly every release is documented
notes for 5 of 5 stable releases
Nothing withdrawn
no release was ever pulled
4 months old
190 releases · first in 2026

Release timeline

190 releases since 2026

2026

20262026

One column per month.

Releases

v0.4.1-0.20261009012638-4baf18fb035a9 Oct 2026pre-release
Nothing published for this version
v0.4.1-0.20261008234208-d91379a318958 Oct 2026pre-release
Nothing published for this version
v0.4.1-0.20261008222426-66f8a88807ff8 Oct 2026pre-release
Nothing published for this version
v0.4.1-0.20261008210239-769fd32630aa8 Oct 2026

v0.4.07 Oct 2026

snapshot rootfs uppers as one tar per container by Benjamin Elder (@BenTheElder) in #2110

What's Changed

⚠️ Breaking Changes

snapshot rootfs uppers as one tar per container by Benjamin Elder (@BenTheElder) in #2110
actorevent: write each actor event to one place, with a shared OTEL_*_EXPORTER parser by Tim Bai (@baizhenyu) in #2193
ateom-microvm: snapshot durable-dir volumes as one tar per volume by Benjamin Elder (@BenTheElder) in #2283

Bug Fixes

Clean up actors when ateom terminates by Scott Funkenhauser (@sfunkenhauser) in #1888
Select kvm-clock for amd64 micro-VM guests by Adhita Selvaraj (@swiftdiaries) in #1945
Reject repointing an actor that owns a snapshot to a different storage location by Luiz Oliveira (@laoj2) in #2014
ateapi: stop logging the raw PostgreSQL connection string (which might contain db password) at startup by Da Huang (@git286) in #1833
atecontroller: add a zero-count bucket to empty exponential histograms by Eric Curtin (@ericcurtin) in #1933
Support workers with multiple IPs by Scott Funkenhauser (@sfunkenhauser) in #2052
router: report no_capacity only for a ResourceExhausted cause by Eric Curtin (@ericcurtin) in #1929
fix(serverboot): honor OTEL_METRICS_EXPORTER=none by Quentin Bisson (@QuentinBisson) in #1878
atelet: try each matching image pull credential in turn by Benjamin Elder (@BenTheElder) in #2104
Support --platform build flag in orchestrator image by Max Smythe (@maxsmythe) in #1901
ateapi: reach an atelet again after its node restarts by Eric Curtin (@ericcurtin) in #2118
atelet: measure what a snapshot image costs, not how long it is by Chenyi Wang (@chw120) in #931
Only require a pause image for gVisor sandboxes by Benjamin Elder (@BenTheElder) in #2144
fix: reload the pod-identity CA pool for client-cert verification by Rashad Sirajudeen (@rashadism) in #1930
fix: reload frozen CA pools in atelet, ateapiauth, and the worker-side atelet dialer by Rashad Sirajudeen (@rashadism) in #1932
Preserve system-info registrations during stale lifecycle cleanup by Adhita Selvaraj (@swiftdiaries) in #1944
[Flaky test fix] TestSandboxAssetPrewarmDownloads - atelet: make the sandbox prewarm worker joinable, fixing the race by Aditya Shantanu (@aditya-shantanu) in #1940
fix(objectstorage): stop initial range downloads on close by ktsoator (@ktsoator) in #2176
contextlogging: redact protobuf attributes in the shared slog handler by Da Huang (@git286) in #1942
WorkerPool can set the ServiceAccount of its worker pods by Danielle Mustillo (@danielle-mustillo) in #2219
router: report a shed request as no_capacity after a full fleet by Jeff Luo (@JeffLuoo) in #2138

Features: Networking and Egress

Add gcp secret manager as a credential provider in its own go module by Yufan Su (@yufan-su) in #1991
egress policy: add an actor JWT value source to CredentialHeader by Max Thompson (@thompsonmax) in #1960
Implement passthrough egress policy by yanavlasov in #2019
docs: how an actor exports telemetry under the egress lockdown by Da Huang (@git286) in #2120
Passthrough dial address resolved by the gateway by Lior Lieberman (@LiorLieberman) in #2045
Update agentgateway and enable ingress and egress test coverage by Eitan Yarmush (@EItanya) in #2158
router authn/z: Prefactor; extract router flag binding to function by Taahir Ahmed (@ahmedtd) in #2161
remove non mitm dataplanes by Lior Lieberman (@LiorLieberman) in #2015
Router no longer logs request credentials or query strings by Da Huang (@git286) in #2206
kubectl-ate: share the missing-actor check across egress-policy commands by Eric Curtin (@ericcurtin) in #2191
graduate credential injection from experimental by Lior Lieberman (@LiorLieberman) in #2101
ateapi: describe no_capacity without "free worker" by Jeff Luo (@JeffLuoo) in #2137
SystemInfo: Implement system-roots.ate.dev trust bundle by Taahir Ahmed (@ahmedtd) in #2049

Features: Security and Identity

feat(credentials): narrow a namespace grant by secret name or label by Jonathan Jamroga (@jjamroga) in #1859
ClusterTrustBundle v1 support by John Howard (@howardjohn) in #1924
atelet: pull image credentials from the kubelet credential provider by Benjamin Elder (@BenTheElder) in #917
ateapi: Implement Policy Governance CRUD Access Policy APIs by Shruti Nair (@SHRUTI6991) in #1965
oidcdiscovery: build the OpenID discovery document by Max Thompson (@thompsonmax) in #1963
kubectl-ate: add --validity flag to admin make-ca-pool by Pedro Nunes (@pintonunes) in #2058
localjwtauthority: thumbprint key IDs and a configurable signing algorithm by Max Thompson (@thompsonmax) in #1961
security: only run sandbox runtime assets from the static files dir by Benjamin Elder (@BenTheElder) in #2269
only enable guest debug console with --guest-debug by Benjamin Elder (@BenTheElder) in #2291
ateapi: [Part 2] Runtime Authorization check for Actor and ActorTemplate CRUD by Shruti Nair (@SHRUTI6991) in #1980

Features: Observability

benchmarking/locust: harvest server-side telemetry from Prometheus by Nishanth Kotla (@Nishanth29) in #1725
ateomstats: add per-activation usage state and the usage emitter by Tim Bai (@baizhenyu) in #2005
otlprelay: use a short temp dir for the test socket by Benjamin Elder (@BenTheElder) in #2270

Features: Workers and Actors

workerservice: validate RequestActorSuspend requests by shrutiyam-glitch in #2023
atelet: use a glibc base image to support credential providers by Benjamin Elder (@BenTheElder) in #2108
ateapi: prefer less-loaded workers via power of two choices by Chenyi Wang (@chw120) in #1915
atelet,ateom: restore local pause checkpoints directly from LocalSnap by Chenyi Wang (@chw120) in #1876
csi: add publishContext to actor volumes by hajiler in #1578
Fix grpc status error when creating actors and tags by Julian Gutierrez Oschmann (@juli4n) in #2263
fake-dataplane: add a fake dataplane skeleton by haiyanmeng in #2272
ocispec: raise actor RLIMIT_NOFILE from 1024 to 1048576 by Yuan Gao (@ygao-g) in #2242

Features: Install and Operations

benchmarking: agent-session workload — a scripted coding agent that suspends while the LLM thinks by Aditya Shantanu (@aditya-shantanu) in #1934
ci: add automated release notes generation by Steven Shriver (@stshrive) in #2018
cordon-control-plane: share one pool, give postgres its own by haiyanmeng in #2056
feat(benchmarking): add substrate spawn benchmark by Sairaj Pokale (@sairajp-rewind) in #1969
Let glutton actors consume CPU, driven from boomer dynconfig by Max Smythe (@maxsmythe) in #1875
ate-setup: add the uniform configuration package by Steven Shriver (@stshrive) in #2012

Documentation

Add Yolo the Octopus logo and quick navigation links to README by Brandon Royal (@brandonroyal) in #2239

Other Changes

atepg: name the row in list decode errors by Eric Curtin (@ericcurtin) in #2000
ategcs: rename and move to pkg/ for reuse outside atelet by ILLUM1N0X in #2013
Remove reserved fields from proto and update back-compat instruction in AGENTS.md by Luiz Oliveira (@laoj2) in #1985
remove ssl_cert_dir and add clearer guidance for actor trust store by Lior Lieberman (@LiorLieberman) in #2044
ateom: share atunnel wiring in ateomtunnel by Eric Curtin (@ericcurtin) in #1959
Delete worker pods in terminal states by Scott Funkenhauser (@sfunkenhauser) in #2051
benchmarking(agentsession): define the session script in YAML, selectable per run by Aditya Shantanu (@aditya-shantanu) in #2046
Introduce a dedicated type for API errors. by Julian Gutierrez Oschmann (@juli4n) in #2072
benchmarking(agentsession): run a script from a file mounted into the worker by Aditya Shantanu (@aditya-shantanu) in #2047
ateom-microvm: use pflag like the other binaries by Benjamin Elder (@BenTheElder) in #2096
Egress gateway no longer fetches an actor's egress policy twice when requests race by Max Thompson (@thompsonmax) in #2095
atelet: take the DATA snapshot file set from ateom by Haven Xia (@HavenXia) in #2028
SystemInfo: Allow multiple trustbundle names in one file by Taahir Ahmed (@ahmedtd) in #2048
Remove onResume.fromData and the DATA_ON_GOLDEN restore scope by shrutiyam-glitch in #2105
Delete CLAUDE.md in favor of AGENTS.md. by Julian Gutierrez Oschmann (@juli4n) in #2125
Don't crash actors on transport errors when calling atelet by Luiz Oliveira (@laoj2) in #2060
Add AGENTS.md files to key API source directories by Julian Gutierrez Oschmann (@juli4n) in #2131
benchmarking: add workerMemory to size benchmark worker pods by Max Smythe (@maxsmythe) in #2109
atepg: move expired-lease cleanup off the lock acquisition path by Matt Van Horn (@mvanhorn) in #1880
Introduce separate PostgreSQL roles for schema ownership and normal application access by Jeremy Alvis (@iplay88keys) in #1752
Finish moving DNS to its own package ateomnet/dns by Bowei Du (@bowei) in #2115
benchmarking(agentsession): classify router HTTP errors like their gRPC origins by Aditya Shantanu (@aditya-shantanu) in #2145
benchmarking: size the runner pod per test, and fan out the agentsession shutdown by Aditya Shantanu (@aditya-shantanu) in #2139
podcertcontroller: skip ClusterTrustBundle updates when nothing changed by Eric Curtin (@ericcurtin) in #2164
move Star History section to top of readme by Lior Lieberman (@LiorLieberman) in #2167
metrics: rename the scheduler outcome no_free_worker to no_capacity by Jeff Luo (@JeffLuoo) in #1895
docs: fix k8s downwardAPI volume doc broken url by doniacld (@doniacld) in #2192
Make ate-apiserver report errors using apierror. by Julian Gutierrez Oschmann (@juli4n) in #2129
objectstoresnapshot/v1: add node and control snapshot plugin API by ILLUM1N0X in #2070
When the call to atelet fails with UNAVAILABLE, propagate the error to clients by Julian Gutierrez Oschmann (@juli4n) in #2196
atelet: show the real error when an actor directory cannot be reset by Eric Curtin (@ericcurtin) in #2142
ci: report e2e-test from the matrix job directly by Benjamin Elder (@BenTheElder) in #2225
Fix error reporing for AccessPolicy resources. by Julian Gutierrez Oschmann (@juli4n) in #2214
MintActorJWT no longer takes the actor's UID by Max Thompson (@thompsonmax) in #2207
envoy: fix one connection per downstream plus cleanups by Lior Lieberman (@LiorLieberman) in #2213
benchmarking: Prometheus can now run on the tainted load-generator pool by Nishanth Kotla (@Nishanth29) in #2215
e2e: run the identity suite with the others by Lior Lieberman (@LiorLieberman) in #2227
ateom-microvm: replace shell commands with Go by Greg Castle (@destijl) in #2147
benchmarking: add a personal-assistant agent-session script and a dwell op by Aditya Shantanu (@aditya-shantanu) in #2230
CSI volume support: follow-up improvements by anishgang in #1729
ci: cache Go and envoy-dataplane builds in e2e by Benjamin Elder (@BenTheElder) in #2229
egress: make egress dial the port the actor connected to and ignore authority ports by Lior Lieberman (@LiorLieberman) in #2228
Set up bundled PostgreSQL identities in ate-setup by Jeremy Alvis (@iplay88keys) in #2025
tarutil: refuse device nodes and unvetted xattrs on extract by Benjamin Elder (@BenTheElder) in #2111
fix comment on pool creation in ci by Lior Lieberman (@LiorLieberman) in #2231
Mask actor_jwt in snapshot plugin requests in logs by Da Huang (@git286) in #2265
atenet-egress: raise mitm_internal circuit breakers above Envoy's 1024 default by Yufan Su (@yufan-su) in

Note truncated.

Open source →

v0.3.030 Sept 2026

Update agentgateway for split actor and ateom identities by Eitan Yarmush (@EItanya) in #1923

What's Changed

Bug Fixes

Update agentgateway for split actor and ateom identities by Eitan Yarmush (@EItanya) in #1923
atelet: pin the multi-actor stats fold and keep CPU baselines across pending sweeps by Tim Bai (@baizhenyu) in #1885
Snapshot path validation by Benjamin Elder (@BenTheElder) in #1950
fix(benchmarking): make the SWE-Perf ActorTemplate deployable by Haowei Cai (Roy) (@roycaihw) in #1889
nighthawk-ingress: let run-dev.sh run more actors than workers by haiyanmeng in #1982
ateom-microvm: reseed the guest CRNG on restore by eliranw in #1524
Pin envoy-dataplane from the release on a pre-built install by Anna Pendleton (@annapendleton) in #1964

Features: Networking and Egress

ateom/actor ID split: Ateom uses MintAteomActorCertificate by Taahir Ahmed (@ahmedtd) in #1809
egress policy enhancements for GA by Lior Lieberman (@LiorLieberman) in #1751
e2e: add test for egress credential injection cujs by Yufan Su (@yufan-su) in #1795
Egress policy plumbing by yanavlasov in #1978
kubectl-ate: add delete egress-policy by Yuan Gao (@ygao-g) in #1808
envoy dyn module followup by Lior Lieberman (@LiorLieberman) in #1995

Features: Security and Identity

ateapi: make the actor JWT issuer configurable and add typ to the header by Max Thompson (@thompsonmax) in #1834
ateapi: [Part 1] Runtime Authorization check for Atespace CRUD by Shruti Nair (@SHRUTI6991) in #1702
ateapi: require an actor JWT lifetime and align the subject with the SPIFFE ID by Max Thompson (@thompsonmax) in #1902

Features: Observability

actorevent: define the actor usage event and the activation epoch by Tim Bai (@baizhenyu) in #1881
benchmarking: actor telemetry for the sweperf workload by Nishanth Kotla (@Nishanth29) in #1848

Features: Install and Operations

CI: create JUnit artifacts and gate on all tests passing by Steven Shriver (@stshrive) in #1873
benchmark(atelet, ateom-microvm): log per-actor checkpoint and restor… by Lucky Abolorunke (@Oneimu) in #1941
ate-setup: add deploy subcommands for podcertificate-controller and SandboxConfig by Haven Xia (@HavenXia) in #2010

Features: Workers and Actors

Add ActorDirs message to carry per-actor directories and and split the path packages by owner by Haven Xia (@HavenXia) in #1730
ateapi: release a suspend's replaced snapshot after committing SUSPENDED by haiyanmeng in #2006

Documentation

docs: add a star history chart to the README by botengyao in #1894
doc: egress credential injection with sample k8s secret credential pr… by Yufan Su (@yufan-su) in #1805
Fix several broken links to CODE_OF_CONDUCT.md by Tim Flannagan (@timflannagan) in #1987

Other Changes

ateom/actor ID split: Clean up purpose from MintActorCertificate by Taahir Ahmed (@ahmedtd) in #1810
Remove unnecessary fsync during ResumeActor by Michelle Au (@msau42) in #1883
serverboot.Fatal: Allow additional slog arguments by Taahir Ahmed (@ahmedtd) in #1908
ate-api: Move authn package into server-specific internal package by Taahir Ahmed (@ahmedtd) in #1909
ateletpb: carry the Restore base snapshot as a typed source, dropping golden_snapshot_uri by Dmitry Berkovich (@dberkov) in #1602
Clean up packages in ateomnet by Bowei Du (@bowei) in #1897
nodepath: move the node state root to /var/lib/ate by Davanum Srinivas (@dims) in #1926
move agw tests to post-merge and release-* branches by Lior Lieberman (@LiorLieberman) in #1949
upgrade otel log to 0.21 by Benjamin Elder (@BenTheElder) in #1958
ateom-gvisor: take the actor directories from the request by Haven Xia (@HavenXia) in #1865
ateom-microvm: take the actor directories from the request and remove ateompath package by Haven Xia (@HavenXia) in #1872
atelet: introduce declarative validation for the AteomSupport RPCs by shrutiyam-glitch in #1903
atelet: add CAP_DAC_OVERRIDE to reset dirs a non-root container wrote by Davanum Srinivas (@dims) in #1910
ateapi: rename --egress-gateway-address to --default-egress-gateway-address by Lior Lieberman (@LiorLieberman) in #1858
Clean up vestigial metadata setting in atepg by Tim Hockin (@thockin) in #1992
Move DV validators under apivalidations. by Julian Gutierrez Oschmann (@juli4n) in #2007

New Contributors

Haowei Cai (Roy) (@roycaihw) made their first contribution in #1889
Tim Flannagan (@timflannagan) made their first contribution in #1987

Full Changelog: v0.2.0...v0.3.0

Committers in this release

Open source →

v0.2.025 Sept 2026Breaking

Substrate is still pre-1.0 and changes quickly. This release contains breaking changes to the API and the wire protocol. Please read them below before…

v0.2.0 adds multi-actor workers, per-sandbox networking, and egress policy enforcement, along with many fixes and API cleanups.

Substrate is still pre-1.0 and changes quickly. This release contains breaking changes to the API and the wire protocol. Please read them below before you upgrade.

Please try it out and file issues for anything you find.

Breaking Changes

Requests are now routed with an explicit ate-target-actor: <atespace>/<actor> header instead of the Host header. (#1333)
ActorTemplate.containers.readyz is renamed to wakeupProbe. (#1794)
The top-level boot field is removed from ResumeActorRequest. (#1548)
IPBlockRule is renamed to CIDRRule. (#1597)
SnapshotsConfig is renamed to SnapshotConfig. (#1791)
LocalSnapshotInfo is renamed to LocalSnapshot. (#1856)
A worker's sandbox_class is now immutable. (#1257)
Every Delete<Resource> method now takes DeletePreconditions. (#1807)
The egress gateway now enforces EgressPolicy. An actor without a policy has no egress, and traffic that no rule allows is denied. (#1545)
Actors can no longer send UDP to any port except DNS. (#1623)
Removed the unused TagStatus.source_actor_uid field (#1772), other unused messages (#1814), and reserved field numbers (#1793).
Removed the ate.scheduler.eligible_workers metric (#1804) and the ateerrors failure-reason taxonomy (#1817).
Snapshot storage paths now use Tag UIDs. (#1521)
kubectl ate now prints a single resource as a bare object, not a list. (#1627)

Features

Workers and Actors

A worker can now run more than one actor at a time. (#1836)
Each actor sandbox gets its own network namespace. (#1689)
New RevertActor lifecycle RPC. (#1675, #1711)
ActorStatus now reports the crash reason and when it happened. (#1867)
An actor is marked crashed when an ateom checkpoint or restore fails with a non-retriable error. (#1220)
ateom can now suspend actors itself. (#1779)
ActorTemplate golden snapshots are published as tags. (#1523)
ExternalSnapshot records the actor_template_uid of each snapshot. (#1713)
The same volume can be mounted at more than one path. (#1611)
The actor template resync interval is configurable. (#1522)
The actor termination grace period is now 30 minutes. (#1565)
API fields can have defaults. (#1630, #1674)

Networking and Egress

The egress gateway enforces each actor's EgressPolicy. (#1545)
An egress credential injector (#1360), plus an example credential provider that reads Kubernetes Secrets (#1335, #1811).
kubectl ate can get, create, and update egress policies. (#1659, #1813)
atunnel supports looking up the original destination over IPv6. (#753)
The parking lot takes its slots when a request parks, not when it is admitted. (#1229)
Initial Envoy Dynamic Modules for the dataplane. (#1535)
agentgateway is tested in CI. (#1598)

Security and Identity

Groundwork for authorization: an OpenFGA model for atespaces, served from the API server. Checks are not enforced yet. (#1233, #1670, #1839)
Actor JWT and certificate minting moved into the API server. (#1315, #1626)
Running actors receive rotated projected trust bundles without a restart. (#1231)
Support for PodCertificateRequest v1, falling back to v1beta1. Needed on clusters that no longer serve v1beta1. (#1829)
Secret-bearing proto fields are marked debug_redact and redacted from RPC logs. (#1803, #1822)
The CSI plugin caches its CA certificate pool. (#1344)

Observability

Actor lifecycle events are emitted over OTLP. (#1658, #1638, #1771)
atelet emits per-actor usage events. (#1206, #1559)
The OTLP relay forwards log records, and ateoms get a LoggerProvider over it. (#1800, #1857)
ate.worker.state reports worker occupancy in actor slots. (#1854)
ate.sandbox.class is bounded by one rule for every emitter. (#1484)
Each component logs its build version at startup. (#1569)

Install and Operations

The namespace, Service names, and ServiceAccount names are configurable. (#350)
A large-cluster install option, and an option to run each control-plane component on a dedicated machine. (#1632)
Tolerations to isolate workload types on tainted nodes. (#1874)
atelet sets resource requests and a priority class. (#1651)
The worker Deployment has an explicit rollout strategy. (#1783)
setup-gcp gains --enable-nested-virtualization and other improvements. (#1669, #1616)
ko base images are pinned by digest. (#1500)
Micro-VM kata assets are bumped to 4.1.0 (#1708), and the kata-config asset is dropped (#1704).
kubectl ate fixes, including better get workers output. (#1536, #1577, #1733)

Bug Fixes

Fixed the kind install on arm64 hosts. (#1869)
In-progress snapshots no longer leak after a worker is deleted. (#1541)
atelet removes an actor's directory when it terminates the actor (#1654), and ateom removes its directory on graceful shutdown (#1678).
ateom-gvisor deletes an actor's containers before its sandbox (#1847), treats a container runsc has no record of as already destroyed (#1666), and keys cgroup leaves by actor UID (#1667).
ateom-gvisor names its root container _pause so no actor container can collide with it. (#1496)
ateom-gvisor no longer passes -direct to runsc restore. (#1549)
ateom-microvm finds leftover VMM processes by their staged path. (#1843)
Stale named network namespaces are replaced. (#1682)
Stale system-info volume registrations are superseded in atelet. (#1684)
atelet caches pool resolutions so a list flap cannot split the CPU counter. (#1479)
The API server always resolves the atelet IP from the node name. (#1742)
An API server replica applies its own worker writes to its cache at commit. (#1583)
Worker pool changes now propagate to workers. (#1636)
atenet reports "unknown" when a resume does not complete (#1482), and has a longer default route timeout (#1529).
ListActorTemplates maps pagination errors correctly. (#1595)
Teardown can now delete crashed actors (#942) and waits for the ate-system namespace to terminate (#1851).
More validation at template creation: snapshot storage location (#1493), system-info projection paths (#1439), and container image (#1614). Added declarative validation for TagStatus and GoldenSnapshotStatus (#1772, #1831).

Documentation

The upgrade runbook is reorganized. (#1624)
The supported egress traffic for GA (#1749), how the gateway enforces an EgressPolicy (#1545), and the atunnel to PEP contract (#1726).
A metrics best-practices guide for component authors. (#1553)
Warnings that worker node pools must not auto-upgrade or use spot nodes (#1528), and about the 30-minute eviction window (#1618).
Added MAINTAINERS.md (#1499), and welcomed Keith Mattix as a maintainer (#1806).

Thank you to all of our contributors.

Committers in this release include:

Open source →