Isolated Sandboxes
Production-grade code execution sandboxes with hardware-level isolation.
What Shipped
- Sub-second sandbox boot on bare-metal k3s
- Persistent shell sessions with tmux-backed reconnect and multi-tab UX
- Snapshot & restore for state preservation across restarts
- Per-sandbox networking with DNS proxy, whitelist egress, and traffic isolation
- Host-side supervisor daemon for sandbox lifecycle outside the Kubernetes pod
- Live cost accrual with tier-based billing multipliers