M3

Issues

• Hardening gVisor sandbox configuration against CPU side-channel risks and binary mismatches

  area/gvisorarea/securitykind/feature
  agent-substrate/substrate#2136 · Filter by author destijl opened on Oct 2, 2026 · M3
  9

  

• Opt-in durability instead of Pause vs Suspend API

  area/apikind/feature
  agent-substrate/substrate#798 · Filter by author BenTheElder opened on Aug 7, 2026 · M3
  6

  

• Compact PG DB migration scripts into a single step before v1.0 substrate release

  area/api-machinerykind/cleanup
  agent-substrate/substrate#1399 · Filter by author jpbetz opened on Sep 2, 2026 · M3
  4

• [Epic] Snapshot GC improvements

  area/api-machineryarea/storagekind/feature
  Task

  agent-substrate/substrate#1510 · Filter by author juli4n opened on Sep 5, 2026 · M3
  3

  

• Ensure Atelet API is idempotent

  area/apiarea/nodekind/featureprio/P0
  agent-substrate/substrate#372 · Filter by author juli4n opened on Jul 1, 2026 · M3
  2

  

• System Upgrade E2E

  area/dev-infraarea/testskind/feature
  Task

  agent-substrate/substrate#1784 · Filter by author HavenXia opened on Sep 21, 2026 · M3
  6

  

• Publish comprehensive Substrate docsite before v1.0 release

  area/dev-infrakind/docskind/featureprio/P0
  agent-substrate/substrate#1863 · Filter by author zlammerts-svg opened on Sep 24, 2026 · M3
  5

  

• Add a doc page for the EgressPolicy API

  area/networkkind/docsprio/P2
  Task

  agent-substrate/substrate#1993 · Filter by author haiyanmeng opened on Sep 29, 2026 · M3
  

• Actor Lifecycle API changes for GA

  area/apikind/feature
  Feature

  agent-substrate/substrate#2069 · Filter by author zoez7 opened on Oct 1, 2026 · M3
  

• Create Actor should treat golden snapshot as any other source_tag

  area/apiarea/api-machinerykind/bug
  Task

  agent-substrate/substrate#2210 · Filter by author zoez7 opened on Oct 5, 2026 · M3
  1

• API breaking changes for M3

  area/apiarea/api-machinerykind/design
  Task

  agent-substrate/substrate#2253 · Filter by author juli4n opened on Oct 6, 2026 · M3
  

• [Step III] Add support preferred_fidelity=ROOTFS

  area/storagekind/feature
  agent-substrate/substrate#2447 · Filter by author dberkov opened on Oct 10, 2026 · M3

• ate-api-server: Take postgres connection strings directly as flags

  area/api-machineryarea/dev-infrakind/cleanup
  Unread
  agent-substrate/substrate#2382·ahmedtd opened Oct 9, 2026 · Updated Oct 19, 2026
  12

• Atelet: create queue and timer to drive the async upload and detach flow

  area/api-machineryarea/nodekind/feature
  agent-substrate/substrate#2571 · Filter by author zoez7 opened on Oct 13, 2026 · M3
  

• atelet: serve sandbox assets from the node-local file cache, keyed by sandbox runtime hash

  area/nodearea/storagekind/feature
  agent-substrate/substrate#2675 · Filter by author dberkov opened on Oct 14, 2026 · M3

• Update agentgateway version to fix drift and CI

  Unread
  agent-substrate/substrate#2962·keithmattix opened Oct 20, 2026 · Updated Oct 24, 2026·Draft
  2

• Fix Actor Memory Overhead Model

  area/apiarea/nodearea/schedulingkind/design
  agent-substrate/substrate#3091 · Filter by author BenTheElder opened on Oct 21, 2026 · M3
  6

  

• OOMKill can take down entire worker

  area/nodearea/securitykind/bug
  agent-substrate/substrate#3092 · Filter by author BenTheElder opened on Oct 21, 2026 · M3
  4

  

• Document how people, pods and CI jobs should authenticate to ate-api

  Unread
  agent-substrate/substrate#3119·thompsonmax opened Oct 22, 2026 · Updated Oct 22, 2026

• [Bug]: Node-local snapshots from async suspends can fill a node's disk; kubelet then evicts the workers and atelet, and the node stays in DiskPressure

  area/nodearea/reliabilityarea/storagekind/bug
  agent-substrate/substrate#3101 · Filter by author chw120 opened on Oct 22, 2026 · M3
  1

  

• microvm: forward sysctls and lift the guest's privileged-port limit to match gVisor

  area/microVMarea/securitykind/bug
  Unread
  agent-substrate/substrate#1904·dims opened Sep 25, 2026 · Updated Oct 24, 2026
  29