{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": false,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": null,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "baponi",
  "checked": "2026-09-30",
  "company": "Baponi",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://baponi.ai/about",
   "quote": "AI Sandbox Platform Built in Rust by a Microsoft AI Infrastructure Engineer"
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No funding, investor, or accelerator information disclosed anywhere on the company site (about, careers, trust, docs); no Crunchbase or Y Combinator profile found (YC company page returns 404, Crunchbase organization page blocked/not found). Company was founded in 2026 per its own site schema and appears to be a very recent, likely self-funded/solo-founder venture, but this is inferred, not confirmed, so stage is left unknown rather than guessed as bootstrapped."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": "https://baponi.ai/careers"
  },
  "note": "Baponi's own 'About' page states it was founded by a single engineer from Microsoft's AI infrastructure organization, based in Austin, TX, with a foundingDate of 2026 (schema.org metadata). No accelerator, investor, funding round, or revenue disclosure was found on the company site, in general web search, on Y Combinator's company directory (404 for baponi slug), or on Crunchbase (org page blocked/not found). Careers page lists five open roles (engineering, security, sales, solutions engineering, marketing), suggesting a small but actively hiring team; headcount not disclosed. Given the very recent founding date and total absence of funding/press coverage, this is most plausibly an early bootstrapped or pre-seed solo/small-team startup, but that is an inference, not a confirmed fact, so ownership is recorded as independent and stage/funding/revenue are left unknown per the evidence-level rules."
 },
 "id": "baponi",
 "name": "Baponi",
 "url": "https://baponi.ai/pricing/",
 "category": "agent-sandbox",
 "isolation": "container",
 "modes": [
  {
   "key": "on-demand",
   "label": "On-demand",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "container"
   },
   "pricing": "resource",
   "vcpu_h": 0.06,
   "ram_gib_h": 0,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": 1,
   "vcpu_options": null,
   "min_vcpu": 0.5,
   "max_vcpu": 4,
   "max_ram_gib": 4,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 60,
   "granularity_s": 60,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Credits: $1/1,000 excess credits on Pro after 10,000 included. No confirmed independent RAM/CPU coefficients.",
   "cpu_class": "dedicated"
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": 0.1,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": 0.1,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": 0,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
     "url": "https://baponi.ai/llms-full.txt"
    },
    {
     "quote": "Full outbound on every tier, including Free",
     "url": "https://baponi.ai/compare/vs-daytona/"
    },
    {
     "quote": "Bandwidth scales with CPU allocation: 200 Mbps per core.",
     "url": "https://baponi.ai/llms-full.txt"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Free",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 1,
   "per_seat": 0,
   "concurrency": 5,
   "max_session_h": 0.016666666666666666,
   "max_vcpu": 1,
   "max_ram_gib": 1,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity."
  },
  {
   "name": "Pro",
   "fee": 97,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 10,
   "per_seat": 0,
   "concurrency": 100,
   "max_session_h": 1,
   "max_vcpu": 4,
   "max_ram_gib": 4,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Annual subscription, sales-quoted by deployment scope and support; self-hosted in the customer's Kubernetes/VPC. Unlimited executions, users and API keys; no per-execution metering, credit system or usage caps."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": null,
  "gpu": false,
  "snapshot": "fs",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": 1,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": [
   "us"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": null,
  "mcp_server": true,
  "isolation": "container",
  "image_oci": true,
  "snapshot_auto": true,
  "harness_api": false,
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": false,
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "snapshot_on_demand": false,
  "own_agent_api": false,
  "egress_ip_type": "datacenter",
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Public credit-metered execution, not per-second CPU/RAM product. One credit covers 60s at 1 CPU+1 GiB; larger matched CPU/RAM sizes scale credits linearly (2 CPU/2 GiB is 2 credits/minute). Separate CPU×RAM multiplication would be wrong.",
  "Not fully priceable in ENGINE_CARD: unknown USD resource rates or machine shape. Null is not zero; do not rank as a free provider.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "Streaming/async output requires Pro. Free: 5 concurrent, 1 custom OCI image, 10 API keys. Concurrency limit returns HTTP 429. One execution per thread_id at a time (409).",
  "Thread state retention is configurable (24 h, 7 d, 30 d, forever default) and counts toward the 10 GB free storage then $0.10/GB-month.",
  "EU residency is storage-only on the managed cloud: a BYOB S3/GCS/Azure bucket can stay in an EU region ('GDPR data residency via BYOB', https://baponi.ai/trust), but execution and thread snapshots run in the US region (sk-us- keys). Full EU residency needs self-hosted Enterprise."
 ],
 "sources": [
  "https://baponi.ai/pricing/",
  "https://baponi.ai/docs/guides/deep-agents"
 ],
 "fleet": {
  "default_max_instances": 5,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": "Free developer documentation explicitly says no credit card. Paid-plan payment/identity checks not detailed.",
  "tiers": "Free 5 concurrent runs; Pro 100; Enterprise advertises unlimited (sales).",
  "notes": "Concurrency counts executions, not retained machines. 10/50 runs fit Pro; 300/1,000 require Enterprise discussion. Separate vCPU/GPU account quotas and turnaround unknown.",
  "sources": [
   "https://baponi.ai/pricing/",
   "https://baponi.ai/docs/guides/deep-agents"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 25,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 12
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://baponi.ai/features.md",
   "quote": "Execution finishes. The sandbox state is snapshotted and the sandbox is destroyed. Billing stops.",
   "note": "Trigger: end of every execution that carries a thread_id; next call with the same thread_id restores it. Filesystem only: the diff of /home/baponi (not /tmp, no memory/processes: 'Between these calls, nothing is running ... It's a saved filesystem state' - how-it-works). Retention 24h/7d/30d/forever, billed as storage beyond 10 GB free.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://baponi.ai/docs/guides/claude-code/",
   "quote": "\"code\": \"claude -p \\\"Research the current price of Bitcoin and summarize your findings\\\" --dangerously-skip-permissions\",",
   "note": "Claude Code is run through the generic /v1/sandbox/execute endpoint (bash command, --output-format stream-json parsed by you). No first-party harness API (no prompt/session/follow-up endpoints). Claude Code appears preinstalled (/home/baponi/.local/bin/claude) -> agent_harnesses, not harness_api.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works",
   "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
   "note": "Binary on/off policy only: 'blocked' (default, no network interface) or 'unrestricted'; set per sandbox config, and an API key can downgrade unrestricted to blocked but never the reverse. 'Internal networks (private IPs, cloud metadata endpoints) are always blocked at the network layer.' No per-domain, IP or CIDR allowlist is documented, so not an egress allowlist. open_internet stays true.",
   "checked": "2026-10-14"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview/",
   "quote": null,
   "note": "Not applicable in practice: sandboxes are per-call (spin up, execute, tear down) and there is no port exposure / preview URL / inbound feature anywhere in the docs or API endpoint list, so nothing inbound to control. Card: inbound_https=false.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "nsjail enforces Linux namespace isolation with a strict seccomp-bpf syscall allowlist, cgroups v2 resource control, zero Linux capabilities, and per-sandbox network namespaces.",
   "note": "nsjail container with zero capabilities (no CAP_NET_ADMIN), non-root user baponi; cannot run iptables/nftables.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works/",
   "quote": "Baponi injects the credentials as standard config files that CLI tools expect",
   "note": "Connectors (PostgreSQL, MySQL, BigQuery, Redis, MongoDB, S3, GCS, Azure, GitHub, Anthropic) inject the real secret INTO the sandbox as RAM-mounted config files/env vars (e.g. ANTHROPIC_API_KEY env var, GH_TOKEN, .pgpass), wiped after execution - the code can read them, so not a proxy. Exception: BYOB bucket credentials stay in a separate mount process ('never inside the sandbox'), but that is a storage mount, not an HTTP credential proxy.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://baponi.ai/docs/getting-started/how-it-works/",
   "quote": "Baponi gives every organization storage that works exactly like BYOB, with the first 10 GB free and expandable as you grow.",
   "note": "Managed volumes (Baponi-hosted, $0.10/GB-mo beyond 10 GB) and BYOB S3/GCS/Azure buckets mounted at /data/{slug}/ on every execution; object-storage-backed FUSE-style mounts, not block volumes.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://baponi.ai/docs/api/files/",
   "quote": "Shared across API keys in the organization",
   "note": "Volumes/BYOB buckets mount into every sandbox of the org (per-key path scoping); many concurrent executions see the same bucket. Access mode 'Read-write or read-only (configurable)'. Writes sync back before the execution response returns (consistency across concurrent writers not documented).",
   "checked": "2026-09-29"
  },
  "desktop": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "A sandbox platform built from the ground up for AI agent workloads... Every call gets a fresh sandbox in under 20ms, torn down when execution ends.",
   "note": "not offered: outside the product's scope — Baponi is a stateless code-execution API (Python/Node/Bash in an nsjail sandbox), not a GUI/VM product; no VNC/RDP/stream desktop is documented.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://baponi.ai/docs.md",
   "quote": "Welcome to the Baponi developer documentation... Full reference for the Execute, Files, and MCP endpoints.",
   "note": "not offered: outside the product's scope — no browser runtime, browser connector, or browser automation is listed among connectors (databases, storage, GitHub, Anthropic) or docs.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "A sandbox platform built from the ground up for AI agent workloads",
   "note": "not offered: outside the product's scope — there is no desktop, so no screenshot+click driving API exists.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
   "note": "not offered: outside the product's scope — a code-execution sandbox with a binary network policy, no browser/stealth fingerprinting feature is documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://baponi.ai/pricing/",
   "quote": "Baponi is a sandboxed code execution platform for AI agents.",
   "note": "not offered: outside the product's scope — no CAPTCHA-solving feature or connector exists; product is code execution, not a browser/scraping agent.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Baponi is a sandboxed code execution platform for AI agents. You send code, it runs in an isolated sandbox... One HTTP call.",
   "note": "not offered: outside the product's scope — sandboxes are ephemeral, created per API call and torn down after execution (sub-20ms boot); there is no persistent addressable machine to SSH into, and no SSH access is documented anywhere in the API/docs.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "Execution finishes. The sandbox state is snapshotted and the sandbox is destroyed. Billing stops.",
   "note": "Snapshotting is automatic on every execution end (tied to thread_id), not a separate on-demand snapshot API/CLI call the user can invoke at will.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Next call with the same thread\\_id restores the snapshot. Hours, days, or weeks later.",
   "note": "Only one thread_id restores to its own single snapshot lineage; no documented API to clone a thread's state into a new, independent thread/sandbox.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Execution finishes. The sandbox state is snapshotted and the sandbox is destroyed.",
   "note": "not offered: outside the product's scope — sandboxes are always destroyed between calls (never kept running), and fork is not offered at all, so cloning a running machine is impossible by design.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "It's a saved filesystem state... Between these calls, nothing is running.",
   "note": "Snapshots are filesystem-only (no memory/process state), and fork is not offered, so memory-preserving forks are not possible.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "Execution finishes. The sandbox state is snapshotted and the sandbox is destroyed. Billing stops.",
   "note": "There is no running machine to pause — every execution fully tears down the sandbox and billing stops entirely; resuming via thread_id recreates a fresh sandbox from the filesystem snapshot rather than pausing/unpausing an existing one.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Next call with the same thread_id restores the snapshot. Hours, days, or weeks later. The agent never manages container lifecycle.",
   "note": "Every API call automatically spins up a fresh sandbox (restoring prior state if thread_id matches) with no explicit start/wake call needed.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Stateful when you need it. Pass a thread_id to persist state across calls. Installed packages, environment variables, and filesystem changes survive between executions, even across days or weeks.",
   "note": null,
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview.md",
   "quote": "Each API key is bound to: A sandbox (runtime image, CPU, RAM, network policy)",
   "note": "CPU/RAM are fixed per API key/sandbox config set in the admin console; each execution is a brand-new sandbox instance, so there is no running machine whose resources get resized live.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://baponi.ai/docs/guides/claude-code.md",
   "quote": "Run Claude Code as a remote headless agent inside an isolated Baponi sandbox. Credentials for Anthropic and GitHub are injected automatically through connectors.",
   "note": "Claude Code is preinstalled/documented as a guided integration (run via bash execute calls), qualifying as an offered coding-agent harness even though it's driven through the generic execute endpoint rather than a dedicated harness API.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview.md",
   "quote": "Baponi is a sandboxed code execution platform for AI agents. Authenticate with an API key, send code, get results.",
   "note": "not offered: outside the product's scope — Baponi provides a code-execution API only; it does not ship its own browser/computer-use/research task agent to drive.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
   "note": "not offered: outside the product's scope — sandboxes only support outbound network access when unrestricted; there is no inbound HTTPS/port exposure or per-machine public IPv4 documented anywhere in the API/docs.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "**Blocked** (default): No network interface at all. No DNS, no outbound connections.",
   "note": "Network policy is a binary per-sandbox choice (blocked vs unrestricted); no per-domain, per-IP, or HTTP method/path level egress rule is documented.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
   "note": "No fixed/static outbound IP is documented; each execution runs in a fresh sandbox with no addressed egress IP guarantee mentioned.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview.md",
   "quote": "Max CPU per sandbox | 1 core | 4 cores | Unlimited",
   "note": "not offered: outside the product's scope — plan limits table only lists CPU/RAM tiers; no GPU option is offered anywhere in pricing or docs.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "You send code, it runs in an isolated sandbox with multi-layer security... Built on Google's nsjail.",
   "note": "not offered: outside the product's scope — sandboxes are Linux nsjail containers; Windows machines are not offered.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "Built on Google's nsjail. Six independent isolation layers enforced at the kernel level.",
   "note": "not offered: outside the product's scope — Linux nsjail-based container sandboxes only; no macOS machines offered.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://baponi.ai/features.md",
   "quote": "Or skip our cloud and run it all in your VPC with one Helm chart. Your infra, your rules.",
   "note": "Self-hosting is offered via a distributed Helm chart (byoc-style deployment into the customer's own Kubernetes/VPC), but no OSI license or public source repository is named; core platform appears closed-source, distributed as a deployable chart/image.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://baponi.ai/trust.md",
   "quote": "Sandboxes run with zero Linux capabilities. No CAP_NET_RAW, no CAP_SYS_ADMIN, no CAP_SYS_PTRACE. There is nothing to escalate to because nothing was granted. ... Runs as unprivileged UID 1000, zero capabilities, user namespaces disabled.",
   "note": "Docker-in-sandbox requires CAP_SYS_ADMIN and/or user namespaces to create containers; Baponi explicitly drops all capabilities and disables user namespaces, and no docs anywhere mention a docker/containerd binary being available inside the nsjail sandbox. No is confirmed.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://baponi.ai/trust.md",
   "quote": "Sandbox boundaries powered by hardened nsjail. ... Capability Dropping: Sandboxes run with zero Linux capabilities.",
   "note": "Isolation is nsjail (Linux namespaces + seccomp-bpf + cgroups v2), not a hypervisor/microVM; no KVM/virtualization device is exposed and capabilities (needed for /dev/kvm access) are fully dropped. No mention anywhere in docs/features/trust pages of nested virtualization support. No is confirmed.",
   "checked": "2026-09-30"
  },
  "root": {
   "value": false,
   "source": "https://baponi.ai/trust.md",
   "quote": "Cannot escalate privileges. Runs as unprivileged UID 1000, zero capabilities, user namespaces disabled.",
   "note": "Explicit statement that sandbox code runs as unprivileged UID 1000 with zero Linux capabilities. No is confirmed.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "With Baponi, you choose per sandbox: blocked (default) or unrestricted (full outbound internet).",
   "note": "Network policy is described only in outbound terms (blocked vs unrestricted egress); there is no port-exposure, preview-URL, ingress, or inbound-HTTPS feature anywhere in the docs, API reference (POST /v1/sandbox/execute is the only network-relevant endpoint), features page, or trust center. No is confirmed.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://baponi.ai/trust.md",
   "quote": "Audit logging on every tier. SOC 2 Type 1 preparation kickoff Q4 2026. Enterprise security controls available today. Formal certifications in progress. ... In Progress: SOC 2 Type 1, Preparation kickoff Q4 2026",
   "note": "Trust center explicitly lists SOC 2 Type 1 as 'In Progress' with prep starting Q4 2026, i.e. not certified as of 2026-09-30. No is confirmed. (Audit logging is described as 'SOC 2-grade' but that is not a certification.)",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://baponi.ai/trust.md",
   "quote": "Enterprise deployments inherit your existing compliance posture. Self-hosted Baponi runs inside your certified infrastructure. Your SOC 2, your HIPAA, your FedRAMP - Baponi operates within the controls you've already established.",
   "note": "Baponi has no HIPAA certification or BAA offering of its own; HIPAA compliance is only achievable by self-hosting inside the customer's already-compliant infrastructure ('your HIPAA'). No HIPAA/BAA mention anywhere else on pricing, features, or trust pages. No is confirmed.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://baponi.ai/docs/getting-started/how-it-works.md",
   "quote": "With Baponi, you choose per sandbox: `blocked` (default) or `unrestricted` (full outbound internet).",
   "note": "Baponi is a cloud-hosted code-execution platform (nsjail sandboxes on Baponi/GCP-managed infrastructure, per api.baponi.ai). No residential/mobile proxy feature or IP-type claim is documented anywhere (features/trust/pricing/API docs); outbound traffic, when unrestricted, egresses from ordinary cloud datacenter IP space typical of this kind of service. static_egress_ip is explicitly false (no fixed IP), so IPs are pooled/ephemeral datacenter addresses, not a dedicated static range.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview",
   "quote": "API keys start with `sk-` followed by a region code and a base64-encoded token.",
   "note": "Managed cloud: every documented key is region-coded 'us' (sk-us-...) and no EU compute region is listed, so code and thread snapshots run in the US. The trust page (https://baponi.ai/trust) claims 'GDPR data residency via BYOB. Mount your own S3, GCS, or Azure Blob storage. Data stays in your bucket, in your region, under your control.' That covers only your own mounted bucket; self-hosted Enterprise can run fully in the EU. See caveats.",
   "checked": "2026-10-14"
  },
  "cpu_class": {
   "value": {
    "on-demand": "dedicated"
   },
   "source": "https://baponi.ai/docs/api/mcp.md",
   "quote": "Each execution gets its own multi-layer sandbox with dedicated CPU, RAM, filesystem, and network namespace.",
   "note": "Docs explicitly call out 'dedicated CPU, RAM' per sandbox, and the API overview's plan-limits table sets a fixed 'Max CPU per sandbox' (1 core Free / 4 cores Pro / unlimited Enterprise) enforced via cgroups v2 resource control per trust.md, consistent with reserved (non-oversubscribed) core allocation per execution rather than a shared/burstable pool. No explicit CPU% baseline (e.g. 'burstable:NN') or oversubscription language is documented.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://baponi.ai/docs/api/overview.md",
   "quote": "API endpoints at a glance: POST /v1/sandbox/execute, GET /v1/executions/{trace_id}, GET /v1/executions/{trace_id}/output, POST /v1/files/list, POST /v1/files/upload_url, POST /v1/files/download_url, DELETE /v1/files, GET /health, GET /ready. No billing, usage, cost, or metrics endpoint.",
   "note": "granularity: account-only; cost: no; Baponi uses credit-based billing (1 credit = 60s execution). The API's execution status endpoint returns duration_ms but not credit cost or billable usage. Credit balance and cost history are viewable only in the admin console dashboard, not via REST API or SDK. No documented endpoint for per-sandbox, per-thread, or per-tag usage/cost reporting.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "us",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://baponi.ai/docs/api/overview/",
 "locations_quote": "API keys start with sk- followed by a region code and a base64-encoded token. Every request to the Execution API requires an API key in the Authorization header with format sk-us-YOUR_API_KEY.",
 "locations_checked": "2026-10-01"
}