{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": false,
  "image_snapshot": false,
  "image_oci": false,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": false,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": false,
  "kernel_features": false,
  "burst": null
 },
 "company": {
  "id": "butter",
  "checked": "2026-09-30",
  "company": "Butter (Butter.dev)",
  "ownership": {
   "value": "acquired",
   "parent": "Modal",
   "source": "https://modal.com/blog/butter-is-joining-modal",
   "quote": "Today we're excited to announce that Butter is joining Modal! Butter founder Erik Dunteman and researcher Raymond Tana will be joining the Modal Sandbox team as part of the acquisition."
  },
  "stage": {
   "value": "subsidiary",
   "source": "https://modal.com/blog/butter-is-joining-modal",
   "quote": "Today we're excited to announce that Butter is joining Modal!",
   "confidence": "high",
   "note": "Butter (YC W25) was acquired/acqui-hired by Modal, announced 2026-04-10; no pre-acquisition priced funding round was found in public sources, so the prior independent-company stage (likely pre-seed/seed given it was a fresh YC batch company) could not be confirmed. Classified as subsidiary reflecting its current status as part of Modal."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Winter 2025",
    "source": "https://www.ycombinator.com/companies/butter",
    "quote": "\"name\":\"Butter\",\"batch\":\"W25\",\"batch_name\":\"Winter 2025\",...\"website\":\"https://butter.dev\",...\"ycdc_status\":\"Active\"",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Butter (YC W25, 'Embedded Sandboxes for Agents', building bVisor) was acquired by Modal, announced 2026-04-10 ('Butter is joining Modal'); founder Erik Dunteman (previously cofounder of Banana.dev) and researcher Raymond Tana joined Modal's Sandbox team. The YC founder bio itself states 'Founder and CEO at Butter.dev (acquired by Modal 2026)'. No funding amounts, investors, or revenue were disclosed publicly for Butter prior to the acquisition. bVisor is described by its own README as an early proof-of-concept, local in-process syscall-interception runtime, not production-ready hosted compute."
 },
 "id": "butter",
 "name": "Butter",
 "url": "https://butter.dev",
 "category": "agent-sandbox",
 "isolation": "gvisor",
 "modes": [
  {
   "key": "native",
   "label": "Native product; see regime notes",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Incomplete or non-resource economics: rates remain null, never interpreted as free."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Current applicable tariff unverified",
   "fee": null,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": ""
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": false,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu_types": [],
  "regions": null,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": false,
  "guest_firewall": false,
  "volume_attach": false,
  "volume_shared": false,
  "isolation": "gvisor",
  "image_oci": false,
  "anti_bot": false,
  "captcha_solving": false,
  "own_agent_api": false,
  "secret_proxy": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Current YC description explicitly local in-process safe bash, not remote VMs. Public runtime is relevant technology but no cloud compute sold is verified. Do not manufacture hosted tariff from a local library.",
  "Inventory exclusion: local runtime, not hosted compute. Card contains no numeric compute modes and no selectable price plan.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "bVisor README: 'bVisor is an early proof-of-concept and should not yet be used in production.' TypeScript SDK only (npm 'bvisor'); Python SDK and CLI 'planned'. Isolation is seccomp-user-notifier syscall interception in-process (gVisor-inspired), not a VM or container; resource limits (cgroups) 'not started'. Last repo commit 2026-02-23 (about 7 months without activity)."
 ],
 "sources": [
  "https://www.butter.dev/",
  "https://github.com/butter-dot-dev/bVisor",
  "https://www.ycombinator.com/companies/butter"
 ],
 "audit_2026_09_29": {
  "applied": 9,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 1
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "Local in-process library, no hosted machines. The whole Sandbox class exposes only constructor, setLogLevel and runCmd; no snapshot/persist/restore of any kind. Sandbox state is an in-process COW overlay that lives with the host process.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "setLogLevel(level: \"OFF\" | \"DEBUG\") {",
   "note": "SDK surface (v0.0.6) is only new Sandbox(), setLogLevel(), runCmd(); no checkpoint/fork API.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "Only a generic runCmd (bash) with stdout/stderr streams; no agent-harness integration.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "| Server sockets | `bind`, `listen`, `accept`, `accept4` |",
   "note": "Listed under 'Blocked' syscalls: guests cannot listen at all, so there are no exposed ports and nothing to control (local library, no URLs).",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "| Privilege escalation | `ptrace`, `mount`, `umount2`, `chroot`, `pivot_root`, `reboot`, `setns`, `unshare`, `seccomp`, `bpf` |",
   "note": "Guests run as the unprivileged host user under a seccomp user-notifier supervisor (no own kernel, no CAP_NET_ADMIN; unshare/setns/bpf blocked; setsockopt unhandled -> ENOSYS). iptables/nftables cannot work.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is imageless, meaning it does not require a base image to run. It runs with direct visibility to the host filesystem.",
   "note": "No volumes: the sandbox sees the host filesystem through a copy-on-write overlay.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "Isolation is achieved via a copy-on-write overlay on top of the host filesystem. Files opened with write flags are copied to a sandbox-local directory. Read-only files are passed through to the real filesystem.",
   "note": "All sandboxes on a host read the same host filesystem (read-only passthrough), but writes are private per sandbox; no first-party shared volume.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "gvisor",
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "Inspired by gVisor, bVisor runs programs directly on the host machine, providing isolation by intercepting and virtualizing Linux syscalls from userspace.",
   "note": "Not actually gVisor and not a VM/container: bVisor is a local in-process seccomp-user-notifier syscall interceptor embedded in the calling application, running on the host's own kernel with a COW filesystem overlay. Closest listed category by mechanism (userspace syscall virtualization) but there is no separate customer machine at all -- isolation is process-level within one host, not multi-tenant machine isolation. derived.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is imageless, meaning it does not require a base image to run. It runs with direct visibility to the host filesystem.",
   "note": null,
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "mount/unshare/setns/bpf/chroot/pivot_root syscalls are explicitly blocked (privilege escalation category), so a Docker daemon cannot run inside a bVisor sandbox.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "| Privilege escalation | `ptrace`, `mount`, `umount2`, `chroot`, `pivot_root`, `reboot`, `setns`, `unshare`, `seccomp`, `bpf` |",
   "note": "No KVM/VM support; sandboxes run as plain unprivileged host processes via seccomp interception, not machines with /dev/kvm.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (a local bash-execution library, not a machine with a GUI)",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (no browser product at all)",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (no remote machine to SSH into; it runs in-process on the caller's own host)",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "SDK surface is only constructor, setLogLevel, runCmd; no snapshot/checkpoint/restore API of any kind.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "No clone/fork API in the SDK.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "No fork capability exists at all, so a running-clone variant is also absent.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "No snapshot or fork mechanism exists, so memory-preserving forks are unavailable.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/src/sdks/node/src/sandbox.ts",
   "quote": "runCmd(command: string) {",
   "note": "No pause/resume method exists; a sandbox is just a live in-process object for the life of the host process.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (there is no hosted machine to sleep/wake -- it runs inline in the calling app)",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "Isolation is achieved via a copy-on-write overlay on top of the host filesystem. Files opened with write flags are copied to a sandbox-local directory.",
   "note": "Sandbox-local writes live in a COW overlay tied to the host process; there is no documented persistence mechanism across sandbox instances/restarts.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor runs programs directly on the host machine, providing isolation by intercepting and virtualizing Linux syscalls from userspace.",
   "note": "not offered: outside the product's scope (no billed hosted machine that idles; lifecycle is tied to the embedding process)",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor runs programs directly on the host machine, providing isolation by intercepting and virtualizing Linux syscalls from userspace.",
   "note": "not offered: outside the product's scope (no provisioned CPU/RAM sizing at all -- it borrows the host process's resources)",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (a syscall-interception bash-exec library, not a template/marketplace product)",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope (no first-party task/browser agent product)",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope; the README lists no MCP server.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "[Running Python](src/sdks/node/examples/python-hello.ts) - Write and execute a Python script",
   "note": "bVisor is imageless and passes through to the host filesystem/binaries, so any Python present on the host works inside a sandbox, as shown by the shipped example.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "The bVisor runtime ships wrapped in a Typescript SDK, installed via npm.",
   "note": "Primary SDK is a TypeScript/Node package (npm install bvisor); Node is the native runtime.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "| Server sockets | `bind`, `listen`, `accept`, `accept4` |",
   "note": "not offered: outside the product's scope. Server-socket syscalls (bind/listen/accept) are explicitly blocked, so sandboxes cannot expose any listening service, let alone get a public IPv4.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope; no HTTP-method/path-level egress control is documented.",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope; no credential-injection proxy is documented.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor runs programs directly on the host machine, providing isolation by intercepting and virtualizing Linux syscalls from userspace.",
   "note": "not offered: outside the product's scope; there is no provider-hosted egress path to make static, since the sandbox shares the host's own network egress.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor currently ships for Linux hosts only, with support for ARM and X86 architectures and glibc/musl ABIs.",
   "note": "not offered: outside the product's scope (a CPU syscall-interception library; no GPU machines are sold)",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "**Compatibility**: bVisor currently ships for Linux hosts only, with support for ARM and X86 architectures and glibc/musl ABIs.",
   "note": null,
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "**Compatibility**: bVisor currently ships for Linux hosts only, with support for ARM and X86 architectures and glibc/musl ABIs.",
   "note": null,
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
   "note": "not offered: outside the product's scope; there is no managed service to deploy into a customer cloud account -- it's an embeddable open-source library the customer runs themselves (which is broader than BYOC, i.e. self_host).",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://www.ycombinator.com/companies/butter",
   "quote": "Butter — Winter 2025 YC batch, embedded bVisor runtime for agent sandboxing.",
   "note": "not offered: outside the product's scope; no compliance/trust page exists for an early-stage open-source proof-of-concept library. No SOC 2 attestation is published.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://www.ycombinator.com/companies/butter",
   "quote": "Butter — Winter 2025 YC batch, embedded bVisor runtime for agent sandboxing.",
   "note": "not offered: outside the product's scope; no HIPAA/BAA offering is published for this early-stage local library.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor",
   "quote": "bVisor is an early proof-of-concept and should not yet be used in production.",
   "note": "not offered: outside the product's scope; there is no hosted account/service with a login system at all -- it's an npm package.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor",
   "quote": "bVisor is an early proof-of-concept and should not yet be used in production.",
   "note": "not offered: outside the product's scope; there is no hosted infrastructure/region at all -- code runs on the customer's own host.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor runs programs directly on the host machine, providing isolation by intercepting and virtualizing Linux syscalls from userspace.",
   "note": "No hosted session to time-limit: a sandbox is an in-process object that lives as long as the embedding application process runs, with no provider-side stop policy documented. derived.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "Networking | socket, socketpair, connect, shutdown, sendto, recvfrom, sendmsg, recvmsg",
   "note": "Outbound connect/send syscalls are virtualized/passed through with no documented allow/deny-list controls.",
   "checked": "2026-09-30"
  },
  "root": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is imageless, meaning it does not require a base image to run. It runs with direct visibility to the host filesystem. ... | Identity (write) | `setuid`, `setgid`, `setreuid`, `setregid`, `setresuid`, `getresuid`, `setresgid`, `getresgid`, `setfsuid`, `setfsgid`, `getgroups`, `setgroups`, `setpriority`, `getpriority` |",
   "note": "bVisor runs commands as the unprivileged host user; identity-changing syscalls (setuid/setgid/etc.) are unhandled, and privilege-escalation syscalls (ptrace, mount, chroot, pivot_root, unshare, seccomp, bpf) are explicitly blocked. There is no root/sudo inside the sandbox.",
   "checked": "2026-09-30"
  },
  "custom_image": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "bVisor is imageless, meaning it does not require a base image to run. It runs with direct visibility to the host filesystem. This allows system dependencies such as `npm` to work out of the box.",
   "note": "The product is explicitly imageless (runs in-process on the host filesystem via a COW overlay); there is no concept of starting from a custom Docker/OCI image at all.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor/blob/main/README.md",
   "quote": "| Server sockets | `bind`, `listen`, `accept`, `accept4` |",
   "note": "Listed under 'Blocked' syscalls: guest code cannot bind/listen/accept at all, so no server (HTTP or otherwise) can ever run inside a sandbox, let alone be exposed via a URL. bVisor is a local in-process bash-execution library, not a hosted machine with ports/URLs.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://github.com/butter-dot-dev/bVisor",
   "quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers. The bVisor runtime ships wrapped in a Typescript SDK, installed via npm.",
   "note": "granularity: none; cost: no; Butter is a local in-process library (not a hosted service). The SDK exposes only constructor, setLogLevel(), and runCmd(). No usage API, no hosted machines to bill, no usage metrics API.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://github.com/butter-dot-dev/bVisor",
 "locations_quote": "bVisor is an SDK and runtime for safely executing bash commands locally, without the need for remote sandboxes or local VMs/containers.",
 "locations_checked": "2026-10-01"
}