v2.6.4

A reliability fix for filtered egress. Transient listener failures no longer
disable proxy access for the remainder of a sandbox session.

Backward compatible: every pre-2.6.4 .ai-jail keeps working.

Fixed

• Filtered egress recovers after a transient accept() failure (#151).
  The supervisor's TCP and Unix proxy listeners and the in-sandbox bridge used
  iterator loops that ended permanently on the first failed accept. Descriptor
  exhaustion or an aborted client could therefore leave every later connection
  refused until the sandbox exited. All three listeners now retry after a
  bounded delay, avoiding a busy loop while preserving the session. Internal
  bridge retries also inherit --exec quiet mode.

Documentation

• Corrected two references in the v2.6.1 notes that were internal ai-memory
  inbox identifiers rather than GitHub issue numbers.

Checksums (SHA256)

7749b73435686b783567bf0427f7cdf4faf7783ac31b1d590d0454048b243d4b  ai-jail-linux-x86_64.tar.gz
2563884af5c29e761612e38f50c970e51d0a94e64ed59c167a327b886bffc169  ai-jail-macos-aarch64.tar.gz

Install

brew tap akitaonrails/tap && brew install ai-jail
yay -S ai-jail-bin
cargo install --locked ai-jail