Unique Engineering Highlights

Runtime portability

The SandboxRuntime protocol lets the control plane use local subprocesses for development and microsandbox for hardware isolation without changing API routes.

Snapshot plus workspace bundling

VM disk state and ordinary workspace files are treated as separate resumability layers. This makes restore explicit and allows a snapshot to carry source/data files when requested.

Path-safe file API

The same canonical resolver protects direct file operations and archive members, with symlink rejection and SHA-256 metadata. This is a strong boundary for agent-generated file activity.

Compute-plane lifecycle

TTL expiry, heartbeat extension, stop/delete distinctions, execution logs, and explicit GC show that the service models operational lifecycle rather than merely wrapping subprocess.run.

Capability discovery

/v1/backends and /readyz expose runtime availability and snapshot support so an upstream agent can choose a compatible execution strategy instead of discovering failure after a request.