{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": null,
  "image_snapshot": false,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": null,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": null,
  "lang_node": null,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "ainclave",
  "checked": "2026-09-30",
  "company": "ainclave (sole proprietorship of Hanna Novikova)",
  "ownership": {
   "value": "bootstrapped",
   "parent": null,
   "source": "https://www.ainclave.com/imprint",
   "quote": "Information required under § 5 DDG. Operator NAME Hanna Novikova POSTAL ADDRESS Amselweg 1 69231 Rauenberg Germany"
  },
  "stage": {
   "value": "bootstrapped",
   "source": "https://www.ainclave.com/imprint",
   "quote": "Operator NAME Hanna Novikova POSTAL ADDRESS Amselweg 1 69231 Rauenberg Germany",
   "confidence": "high",
   "note": "The site's own imprint identifies the operator as a single named individual (a sole proprietorship), with no company entity, investor, or team page anywhere on the domain. No press, Crunchbase, HN, or YC mention found for 'ainclave'. Product is explicitly pre-launch/design-partner phase with unpublished pricing. Treated as a self-funded/bootstrapped solo operation rather than an institutionally financed startup; there is no evidence of any priced funding round."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 1,
   "source": "https://www.ainclave.com/imprint"
  },
  "note": "ainclave is a pre-launch, design-partner-only product (no public pricing, no self-serve signup) operated by a single named individual (Hanna Novikova, Rauenberg, Germany) per its own legal imprint — there is no evidence of a registered company, co-founders, investors, or any funding round. No DPA, certifications (SOC2/HIPAA), or pen-test report exist yet. Buyers should treat this as an unfunded, very early-stage solo project, not an institutionally backed startup."
 },
 "id": "ainclave",
 "name": "ainclave",
 "url": "https://www.ainclave.com/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "On-demand",
   "flags": [
    "sales",
    "beta"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": 0,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "",
   "cpu_class": "shared"
  },
  {
   "key": "dedicated",
   "label": "Dedicated reserved hosts",
   "flags": [
    "sales",
    "beta"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "",
   "cpu_class": "dedicated"
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "Deny-default egress on the host datapath",
     "url": "https://ainclave.com/pricing"
    },
    {
     "quote": "Egress is closed by default — a session reaches only the destinations its own configuration needs.",
     "url": "https://ainclave.com/"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Design partner",
   "fee": null,
   "flags": [
    "sales",
    "beta"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": null,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu_types": [],
  "regions": [
   "eu"
  ],
  "lang_python": null,
  "lang_node": null,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": false,
  "isolation": "firecracker",
  "image_oci": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "egress_allowlist_level": "domain",
  "secret_proxy": "ai-only",
  "volume_attach": false,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "harness_api": false,
  "own_agent_api": false,
  "ingress_rules": false,
  "guest_firewall": true,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Design-partner access. Official pricing explicitly says rates are not yet published. Session wall-clock ready-to-stop, not CPU-active time. Shared and reserved dedicated bare-metal plans have different procurement but unpublished dollars.",
  "On-prem and audit export are roadmap, not confirmed shipping features.",
  "Not fully priceable in ENGINE_CARD: unknown USD resource rates or machine shape. Null is not zero; do not rank as a free provider.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "Billing meter is wall-clock from session 'ready' to stop. Idle time inside a running session is billed, bounded only by the optional user-set idle timeout. Budget caps are in runtime minutes (per session lifetime and per account per period) and stop the sessions (hard cap).",
  "Status: pre-launch design-partner phase, operated by an individual (imprint: Hanna Novikova, Rauenberg, Germany). There is no DPA, no certification, no pen-test report, and no public CLI. Egress destinations are fixed by configuration (repo host, model endpoint, MCP endpoints); the self-service allowlist is roadmap."
 ],
 "sources": [
  "https://ainclave.com/pricing"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "sales",
  "raise_time_days": null,
  "verification": null,
  "tiers": null,
  "notes": "Pricing offers a design-partner/contact-led offering; no self-serve account resource quota or guaranteed fleet entitlement established.",
  "sources": [
   "https://www.ainclave.com/pricing",
   "https://ainclave.com/pricing"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 11,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 4
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "A self-service egress allowlist; export and tamper-evident anchoring for the session event feed; session persistence, resume and fork; a public CLI and agent skill; on-premises deployment; and an external penetration test report.",
   "note": "Listed under 'What is not built yet?'. Sessions stop on idle timeout / lifetime cap / account runtime budget; no state is saved (session persistence and resume are roadmap).",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://www.ainclave.com/solutions/engineering-teams",
   "quote": "Session persistence, resume and fork.",
   "note": "Under 'Roadmap — Designed and not shipped. None of the following is available today.' No snapshot/checkpoint/fork API today.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Egress is deny-default: the baseline policy grants no destination at all. A session reaches only what its own configuration names at create time — the repository host, the model endpoint, configured MCP endpoints. That list is fixed for the life of the session. Enforcement sits on the host datapath, not in a proxy the workload could route around.",
   "note": "Host-enforced deny-default: host DNS resolver scoped to the session list + TLS forwarded only on exact hostname (SNI) match; cloud metadata unreachable. BUT the list is derived from the chosen configuration (repo host, model endpoint, MCP endpoints); a self-service, per-destination editable allowlist is roadmap.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "secret_proxy": {
   "value": "ai-only",
   "source": "https://www.ainclave.com/faq",
   "quote": "It reaches the agent process only as a placeholder: the environment variable inside the guest carries a reference, and the real bearer token is substituted on the outbound request, so only the destination server sees it. The substitution happens outside the agent process, but the proxy that performs it terminates TLS inside the same guest, and nothing separates the two.",
   "note": "Covers the BYOT model-provider token (and apparently source-control credentials: 'Provider and source-control credentials are stored as encrypted vault references'); users cannot register credentials for arbitrary hosts (destinations follow the config). Big caveat: the substituting proxy runs INSIDE the same microVM guest and terminates TLS there, so the real secret does enter the sandbox VM (just not the agent process); the vendor says whether the agent can reach it is untested. Non-HTTP protocols not covered/documented.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://www.ainclave.com/design-partners",
   "quote": "Session persistence and fork",
   "note": "Listed under 'NOT BUILT YET'. Each session gets a repo mount (git remote cloned/mounted read/write); 'Volumes are encrypted' refers to backing storage, no attachable persistent volumes documented.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://www.ainclave.com/design-partners",
   "quote": "Session persistence and fork",
   "note": "No persistent or shared volumes; one repo mount per session.",
   "checked": "2026-09-29"
  },
  "image_oci": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "A session is the unit of everything: isolation, budget, and audit. It boots a Firecracker microVM with its own guest kernel on KVM ... The repo is mounted into it, and the filesystem and syscall policy is fixed when the sandbox is created.",
   "note": "not offered: session provisioning is described only as a repo mount plus a chosen model/token; no custom Docker/OCI image start path is documented anywhere on the site.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "An AI agent sandbox for autonomous coding agents ... Own microVM · Repo mount · Network boundary: starts closed",
   "note": "not offered: outside the product's scope — a headless coding-agent sandbox (repo + model + egress policy), no desktop/VNC/RDP surface is mentioned anywhere.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "An AI agent sandbox for autonomous coding agents ... The agent is supposed to touch your repository, run your test suite, install packages and call a model API.",
   "note": "not offered: outside the product's scope — the product is a coding-agent sandbox around a repo, not a browser/browsing product.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "An AI agent sandbox for autonomous coding agents ... The agent is supposed to touch your repository, run your test suite, install packages and call a model API.",
   "note": "not offered: outside the product's scope — no screenshot/click API; the whole product surface is a coding-agent session, not a GUI-driving agent.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Managed sandbox infrastructure for autonomous coding agents: one Firecracker microVM per session, deny-default egress, hard budget caps, EU execution and storage.",
   "note": "not offered: outside the product's scope — a coding-agent sandbox with deny-default egress, not a browsing/scraping stealth product.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Managed sandbox infrastructure for autonomous coding agents: one Firecracker microVM per session, deny-default egress, hard budget caps, EU execution and storage.",
   "note": "not offered: outside the product's scope — a coding-agent sandbox product, no CAPTCHA-solving feature documented.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://www.ainclave.com/faq",
   "quote": "Execution and storage run on bare metal at an EU provider, so the code itself stays in the EU.",
   "note": "derived: outbound traffic leaves from EU datacenter bare-metal infrastructure via the host datapath; no residential/mobile IP product is offered, and no static/fixed egress IP is documented either.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "You point your agent at it and go ... A session is the unit of everything: isolation, budget, and audit.",
   "note": "not offered: no SSH access to sessions is documented; the only stated access paths are the repo mount, the model connection, and the (roadmap) public CLI — interactive SSH into the microVM is never mentioned.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? A self-service egress allowlist; export and tamper-evident anchoring for the session event feed; session persistence, resume and fork; a public CLI and agent skill; on-premises deployment; and an external penetration test report.",
   "note": "Listed under 'not built yet' — fork (running or otherwise) is roadmap, not shipped.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://www.ainclave.com/design-partners",
   "quote": "Not built yet ... Session persistence and fork.",
   "note": "No snapshot/fork capability exists today (snapshot itself is 'none'), so memory-preserving fork is unavailable.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "An idle timeout bounds that. You set how long a session may sit without work before it stops itself, so an agent that has gone quiet costs you that timeout rather than the rest of the night.",
   "note": "derived: an idle session stops itself (billing/lifecycle ends); there is no described mechanism where a stopped/sleeping session is later woken automatically by an inbound request — consistent with there being no session persistence/resume (roadmap).",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Shared capacity, billed on active session runtime ... Dedicated: Reserved bare metal instead of shared infrastructure.",
   "note": "not offered: outside the product's scope — resource shape is fixed per tier (shared vs. dedicated reserved hosts) at session/procurement time; no API or control to change CPU/RAM of a running session is documented.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://www.ainclave.com/solutions/engineering-teams",
   "quote": "2. Bring the model and configuration. Your token and your provider, or an EU-hosted model. No model lock-in, and no platform to migrate off later.",
   "note": "not offered: outside the product's scope — the product supplies the sandbox (repo mount, model connection, egress boundary); no preinstalled coding-agent harness (Claude Code, Codex, OpenCode, etc.) or harness template is documented. The site's blog posts about Claude Code/Codex/Docker Sandboxes describe other vendors' products, not ainclave features.",
   "checked": "2026-09-30"
  },
  "harness_api": {
   "value": false,
   "source": "https://www.ainclave.com/solutions/engineering-teams",
   "quote": "Live session visibility. A running session streams a structured event feed you can watch, boundary decisions included. The events are persisted as OCSF records.",
   "note": "not offered: the only documented API-like surface is a read-only structured event/audit feed (and even a public CLI is roadmap); no first-party API to prompt/drive a coding harness or receive follow-ups is documented.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "An AI agent sandbox for autonomous coding agents ... Model: bring your own — ainclave provides the sandbox, not the model.",
   "note": "not offered: outside the product's scope — ainclave explicitly provides infrastructure/sandbox, not an agent; there is no first-party browser/computer-use/research task agent it exposes via API.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "A session starts with a deny-all egress policy and reaches only the destinations its own configuration names at create time — the repository host, the model endpoint, any configured MCP endpoint.",
   "note": "not offered: 'MCP endpoint' here refers to outbound MCP servers the agent's session may be configured to reach, not an MCP server ainclave ships to let a client control ainclave sandboxes. No such control-plane MCP server is documented, and even a public CLI is listed as roadmap.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "A session starts with no route out. ... Enforcement sits on the host datapath, not in a proxy the workload could route around.",
   "note": "not offered: outside the product's scope — the product is described purely in terms of outbound (egress) reach; there is no mention of inbound connectivity or a per-machine public IPv4 address for reaching the sandbox.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://www.ainclave.com/agent-sandbox",
   "quote": "One session, one microVM. A session is the unit of everything: isolation, budget, and audit.",
   "note": "not offered: outside the product's scope — no exposed-ports/HTTPS-URL feature is documented; the session model is repo + model + egress-only network.",
   "checked": "2026-09-30"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Network boundary: A session starts with no route out.",
   "note": "not offered: outside the product's scope — all documented network controls govern egress (outbound); there is no inbound/ingress control surface (no exposed ports at all).",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "A TLS connection leaving the guest is forwarded only when the host it asks for matches an entry on that list exactly — the match is on the name, and it is made on the host.",
   "note": "Egress control is enforced at the hostname/SNI level only ('the match is on the name'); no HTTP method/path-level egress rule is documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Each session boots a Firecracker microVM on KVM with its own guest kernel. ... The enforcing layer is the host, not the guest. The guest supervisor carries its own egress policy as a second layer.",
   "note": "derived: full Firecracker microVM with its own guest kernel; the docs even mention the guest supervisor carries a second egress-policy layer, consistent with root/iptables-nftables-capable guest kernel, though root itself is not explicitly confirmed on the card.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Name resolution is forced to a host resolver that answers only for the session's own list ... a TLS connection leaving the guest is forwarded only when the host it asks for matches an entry on that list exactly.",
   "note": "not offered: egress is described only in terms of which destination hostnames are reachable, never in terms of a fixed/static source IP for outbound connections; no static egress IP feature is documented.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Managed sandbox infrastructure for autonomous coding agents: one Firecracker microVM per session, deny-default egress, hard budget caps, EU execution and storage.",
   "note": "not offered: outside the product's scope — a CPU coding-agent sandbox product; no GPU machine type is mentioned anywhere on pricing or product pages.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Each session boots a Firecracker microVM on KVM with its own guest kernel.",
   "note": "not offered: outside the product's scope — Firecracker/KVM microVMs run Linux guests; no Windows machine option is documented (card also marks linux:true as the only OS).",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Each session boots a Firecracker microVM on KVM with its own guest kernel.",
   "note": "not offered: outside the product's scope — Firecracker is a Linux/KVM microVM technology; no macOS machine option is documented.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://www.ainclave.com/design-partners",
   "quote": "Not built yet ... On-premises deployment ROADMAP",
   "note": "On-premises/BYOC deployment is explicitly listed as roadmap, not shipped.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Managed sandbox infrastructure for autonomous coding agents: one Firecracker microVM per session, deny-default egress, hard budget caps, EU execution and storage.",
   "note": "not offered: no GitHub org, open-source repo, or OSI-licensed core product is referenced anywhere on the site; it is presented purely as a managed hosted service.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://www.ainclave.com/pricing",
   "quote": "There is no ceiling on your plan. We do not bound how long a session may run. The caps below are yours: you set them, and you can switch them off — a run that takes a weekend is a decision you make, not a limit you work around.",
   "note": "No provider-imposed maximum; only optional user-set lifetime/idle caps exist and can be disabled.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.ainclave.com/security/microvm-isolation",
   "quote": "Each session boots a Firecracker microVM on KVM with its own guest kernel. A guest kernel bug is contained inside that VM instead of reaching a kernel shared with other tenants.",
   "note": "Derived: the guest is itself a Firecracker microVM (one level of hardware virtualization already consumed by the host); no page states hardware virtualization extensions (/dev/kvm) are exposed inside the guest, and the product is scoped narrowly to running a single coding-agent process against a repo, not to nested VM/emulator workloads.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "Execution and storage run on bare metal at an EU provider, so the code itself stays in the EU.",
   "note": "No page offers an architecture choice or mentions ARM machines; the only 'arm64' mention on the domain (kvm_arm64 kernel module) appears in a blog post analyzing a third-party product (Docker Sandboxes' host requirements), not ainclave's own infrastructure. Treated as not offered given no self-serve compute options exist at all (design-partner/sales-led, single unspecified shape).",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "NEXT_PUBLIC_AUTH_PASSWORD:\"true\", NEXT_PUBLIC_AUTH_MAGIC_LINK:\"false\", NEXT_PUBLIC_AUTH_PASSKEY:\"false\"",
   "note": "Site's own embedded app configuration (visible in page source) enables only password login and explicitly disables magic-link and passkey auth, with no SAML/OIDC/SSO flag present anywhere in that config or in any docs page. Combined with the pre-launch, individually-operated, design-partner-only status (no DPA, no certifications yet per the card's caveats), SSO is not offered today.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? ... session persistence, resume and fork ... on-premises deployment; and an external penetration test report.",
   "note": "Sessions have no persistence today; a stopped/timed-out/capped session's filesystem is gone. Session persistence is explicitly listed as roadmap, not shipped.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? ... session persistence, resume and fork ...",
   "note": "No snapshot/checkpoint API today; matches feature_evidence already on file for snapshot_auto/snapshot_on_demand (both false).",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? ... session persistence, resume and fork ...",
   "note": "\"Resume\" is explicitly named as not built yet. Sessions stop on idle timeout / lifetime cap / account runtime budget with no way to resume state.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? ... session persistence, resume and fork ...",
   "note": "\"Fork\" is explicitly named as not built yet, consistent with design-partners page quote (\"Session persistence and fork\" under NOT BUILT YET).",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://www.ainclave.com/faq",
   "quote": "What is not built yet? A self-service egress allowlist; export and tamper-evident anchoring for the session event feed; session persistence, resume and fork; a public CLI and agent skill; on-premises deployment; and an external penetration test report.",
   "note": "On-premises deployment is explicitly listed as roadmap/not built. Product is a hosted EU bare-metal microVM service today; no self-hosted/on-prem option exists.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://www.ainclave.com/solutions/security-compliance",
   "quote": "None of this is a certification — we hold none today, and we will not imply one. ... We hold no certification today, every control the matrix calls limited stays limited in the meeting, and nothing on this page is softened for a procurement conversation.",
   "note": "Explicit statement of holding no certifications at all (SOC2 or otherwise). Also no DPA yet per FAQ (\"Can you sign a data processing agreement? Not yet.\"), and caveats note no pen-test report either.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://www.ainclave.com/solutions/security-compliance",
   "quote": "None of this is a certification — we hold none today, and we will not imply one. ... We hold no certification today ...",
   "note": "No HIPAA (or any) certification held. Company is a pre-launch design-partner-stage operation run by an individual, with no DPA/BAA infrastructure in place, consistent with no HIPAA compliance.",
   "checked": "2026-09-30"
  },
  "cpu_class": {
   "value": {
    "on-demand": "shared",
    "dedicated": "dedicated"
   },
   "source": "https://www.ainclave.com/pricing",
   "quote": "Shared Default Usage-based per session hour Shared capacity, billed on active session runtime. ... Dedicated For regulated teams Reserved capacity Reserved bare metal instead of shared infrastructure. Everything in Shared. Dedicated hosts — physical, not just logical, separation.",
   "note": "Pricing page names two tiers: 'Shared' (matches card mode key on-demand) explicitly billed on shared capacity, and 'Dedicated' (matches card mode key dedicated) explicitly reserved/physical bare-metal hosts, not shared infrastructure.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://www.ainclave.com/pricing",
   "quote": "Rates are not published yet. Design partners receive the rate card in writing before anything is billed. Billing tracks wall-clock time from session ready to stop.",
   "note": "granularity: none; cost: no; Ainclave bills per session runtime (wall-clock). No public API documented for retrieving usage; a live event feed per session exists for audit but not usage/billing data. Usage reporting appears internal-only. Contact sales for design partner access.",
   "confidence": "medium",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://www.ainclave.com/pricing",
 "locations_quote": "EU execution and storage",
 "locations_checked": "2026-10-01"
}