Setting Up Your Sandbox¶

Everything you configure on a sandbox before an agent runs inside it.

What it is and why it exists¶

The sandbox is the security boundary. Agents can only reach destinations explicitly configured on it, and every other outbound call is blocked.

Choosing a compute size¶

Size the sandbox to the job. A lookup-and-summarise agent needs far less than one that processes a repository.

Small agent¶

1 vCPU and 1 GB RAM is the free-tier allocation.

Big agent¶

TODO: the sizes available above the free tier.

Domain allowlisting and package management¶

Two allowlists, set in one place and reused across agents. Update the definition once and every agent using it picks up the change.

Filesystem read-write and environment variables¶

TODO: which paths are writable, whether they persist between runs, and how environment variables reach the agent.

Sandbox limits by tier¶

Free, Pro and Enterprise each cap compute and retention differently. The full table lives in Sandbox Limits by Tier.