{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": null,
  "sso": null,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "chronicle-labs",
  "checked": "2026-09-30",
  "company": "Chronicle Labs",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/chronicle-labs",
   "quote": "Chronicle Labs is a staging environment for enterprise AI agents: we capture every event the agent sees in production and backtest it, so customers can safely test new behaviors without breaking anything."
  },
  "stage": {
   "value": "pre-seed",
   "source": "https://www.ycombinator.com/companies/chronicle-labs",
   "quote": "Chronicle Labs Founded: 2026 Batch: Spring 2026 Team Size: 2 Status: Active Location: San Francisco Primary Partner: Pete Koomen",
   "confidence": "medium",
   "note": "At least pre-seed: went through Y Combinator (Spring 2026), which invests in every company it takes; no later round found.",
   "derived": true
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Spring 2026",
    "source": "https://www.ycombinator.com/companies/chronicle-labs",
    "quote": "Chronicle Labs Founded: 2026 Batch: Spring 2026 Team Size: 2 Status: Active Location: San Francisco Primary Partner: Pete Koomen",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [
   "Accel"
  ],
  "portfolio_listings": [
   {
    "source": "Accel",
    "company": "Chronicle",
    "batch": null,
    "how": "name"
   }
  ],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 2,
   "source": "https://www.ycombinator.com/companies/chronicle-labs"
  },
  "note": "Very early-stage: founded 2026, YC Spring 2026 (current) batch, team of 2 (co-founders Ayman Saleh, Founder/CTO, ex-NASA JPL/FlightWave, and Rowan Zyadeh). The YC directory page (https://www.ycombinator.com/companies/chronicle-labs) lists website https://chronicle-labs.com, matching the provider card's domain, and status 'Active' - the hint is confirmed as the same company. No funding amount, round type, investor names, or revenue were found in web/press searches within the time budget; /pricing and any investor/press pages return 404, consistent with a pre-revenue, demo-led startup that has not disclosed fundraising details."
 },
 "id": "chronicle-labs",
 "name": "Chronicle Labs",
 "url": "https://chronicle-labs.com",
 "category": "agent-sandbox",
 "isolation": "qemu-kvm",
 "modes": [
  {
   "key": "native",
   "label": "Native service",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Not a rentable compute sandbox. Chronicle Labs is an agent testing/backtesting platform: it builds simulated 'worlds' of service twins (simulated vendor APIs such as Slack/Linear/Salesforce seeded from production data) and runs the customer's agent (their own run command) against task suites inside Chronicle's evaluation sandbox, scoring the results. Trials run in per-trial smolvm (libkrun) microVMs on KVM; the orchestrator also has Daytona and Docker drivers. No public price, no CPU/RAM tariff; sales/demo-led with a free signup."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Custom / unverified",
   "fee": null,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": ""
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": 720,
  "custom_image": null,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": null,
  "sso": null,
  "gpu_types": [],
  "regions": null,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": null,
  "mcp_server": false,
  "snapshot_on_demand": true,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_shared": false,
  "isolation": "qemu-kvm",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "snapshot_auto": false,
  "volume_attach": true,
  "harness_api": false,
  "own_agent_api": false,
  "egress_ip_type": "datacenter",
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Demo-led agent testing/backtesting platform (YC Spring 2026, Active); /pricing returns 404 and no rates are published anywhere (site, llms.txt, docs). It does not rent arbitrary compute: customers run their own agent command inside Chronicle's evaluation sandbox against service twins (simulated vendor APIs). Entry points: free signup and a 'Free Agent Audit'.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "Documented limits: evaluation concurrency 1-32 trials (default 4); 8 agents and 200 trials per run; twins live 1-720 h (default 72, ttl_hours) and count against an org 'twin capacity' (403 when exceeded); 429 = 'Over the concurrency or trial limit'; 403 'Your organization doesn't have sandbox access' (sandbox access is gated per org). Capacity sizes per plan are not published.",
  "Free entry points exist (free signup at app.chronicle-labs.com, free agent audit), but no free-tier size, credit amount or paid tariff is published; free.* stay null."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/chronicle-labs",
  "https://chronicle-labs.com/",
  "https://chronicle-labs.com/llms.txt"
 ],
 "audit_2026_09_29": {
  "applied": 5,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 2
 },
 "feature_evidence": {
  "snapshot_on_demand": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Save a running machine mid-execution, rewind it, or branch it into copies that keep running from the same point. Checkpoints capture RAM, CPU state and disks; branches are copy-on-write children of a live machine.",
   "note": "smolvm (the microVM Chronicle runs trials in): memory INCLUDED (RAM+CPU+disk); new machines boot from a checkpoint (`machine create --from agent.checkpoint`) and live COW branches. Chronicle's blog: bake a world, publish .smolmachine artifact via OCI, rehydrate/fork many times.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "smolvm adds a second, independent layer at the VM boundary: networking is disabled by default, and enabling it requires an explicit domain allowlist.",
   "note": "Enforced outside the guest at the VM boundary. Chronicle policies: deny_all / mocked_only / passthrough_record (vendor domains). smolvm allows --allow-host / --allow-host-pattern (domains, wildcards) AND --allow-cidr (IP/CIDR), so level=both.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/docs/security-model.md",
   "quote": "Networking is disabled by default. Enabling --net, port forwarding, or host services expands the workload's reachable surface.",
   "note": "Ports closed by default; you explicitly publish port mappings (Smolfile `ports = [\"8000:8000\"]`, max 64 mappings) and there is an [auth] table. You choose which ports are exposed. Chronicle trials typically run with no inbound network.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "smolvm gives each workload a hardware-isolated libkrun microVM with its own guest kernel and (untrusted) root; a full guest kernel means iptables/nftables inside the VM take effect. Derived.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/docs/credential-substitution.md",
   "quote": "The guest receives an opaque placeholder in the environment variable it expects; the host replaces the placeholder with the real value only on HTTPS requests to the hosts you allow, and only inside a request header. The value never enters the machine, its record, or a checkpoint.",
   "note": "Real secret proxy in the smolvm substrate: register credentials for ARBITRARY HTTPS hosts (e.g. api.notion.com, api.github.com) => any-http. HTTPS + request-header only; non-HTTP protocols (DB/SSH/git) and query-string/body use NOT covered (refused or literal placeholder). Chronicle's own trials mainly mock vendor APIs (worldd), so real creds are rarely used; capability belongs to the sandbox tech.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "Isolated: one run must never see another workspace's data or mutate another trial's state.",
   "note": "Strict per-VM isolation by design; branches are copy-on-write children, not a shared read-write filesystem mounted by several running machines. No shared/network volume documented.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "qemu-kvm",
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Each workload runs in a hardware-virtualized VM with its own guest kernel on Hypervisor.framework (macOS), KVM (Linux)... libkrun is the VMM",
   "note": "Trials run in per-trial smolvm microVMs (libkrun VMM on KVM/Linux), a full hardware-isolated VM with its own guest kernel - closest taxonomy bucket is full VM on KVM, though the actual VMM is libkrun (a lightweight microVM library), not literally QEMU.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Images use the OCI format, so anything on Docker Hub, ghcr.io or another registry boots as a microVM, with no Docker daemon.",
   "note": "Chronicle's own worlds are also published/pulled as OCI artifacts (.smolmachine via OCI registry per the engineering blog).",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/examples/docker-in-vm/docker.smolfile",
   "quote": "Runs Docker Engine in a bare Alpine VM. Init commands run directly in the VM as root via VmExec, so Docker gets full kernel privileges without any capability restrictions.",
   "note": "Documented example runs dockerd (and even k3d/k3s) inside the smolvm guest kernel that Chronicle's trials use.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform that turns production data into staging environments...runs agents against replicated production environments",
   "note": "not offered: outside the product's scope. A generic Wayland/VNC desktop example exists in the underlying open-source smolvm substrate, but Chronicle's own testing/backtesting product exposes no GUI/desktop to customers.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform...runs agents against replicated production environments derived from real traffic",
   "note": "not offered: outside the product's scope. Chronicle mocks vendor APIs (worldd) rather than driving a real browser; a headless-browser example exists in the smolvm substrate but is not a Chronicle product feature.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform...runs agents against replicated production environments",
   "note": "not offered: outside the product's scope - no screenshot/click desktop-driving API found.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform that turns production data into staging environments",
   "note": "not offered: outside the product's scope - this is an internal agent evaluation platform, not a web-scraping/bot-evasion product.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform that turns production data into staging environments",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "runs agents against replicated production environments derived from real traffic",
   "note": "not offered: outside the product's scope - trials are ephemeral, orchestrator-driven sandboxes (created/destroyed per trial) rather than machines customers interactively SSH into.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "mem",
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Save a running machine mid-execution, rewind it, or branch it into copies that keep running from the same point. Checkpoints capture RAM, CPU state and disks",
   "note": "smolvm checkpoints capture RAM + CPU state + disk (full memory snapshot), matching Chronicle's card feature_evidence for snapshot_on_demand.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "smolvm machine checkpoint --name agent -o agent.checkpoint        # save it, processes and all",
   "note": "Checkpointing requires an explicit CLI/API call; no documented automatic save-on-stop/idle/timeout behavior.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "smolvm machine branch --from agent --name try-1                   # live copy-on-write child",
   "note": "Branching (forking) a machine into new copy-on-write copies is a core documented feature.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "smolvm machine start --name agent --branchable\nsmolvm machine branch --from agent --name try-1                   # live copy-on-write child",
   "note": "Branch is taken from a running (--branchable) machine without stopping it.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Save a running machine mid-execution, rewind it, or branch it into copies that keep running from the same point.",
   "note": "Live branches are copy-on-write clones of a running machine, so they include memory/process state (clones keep running from the same point).",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "stop without losing execution with [pause and resume](docs/pause-resume.md)",
   "note": "Explicit pause/resume documented.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "A trial begins when the orchestrator selects the next case from the pinned Dataset Version and asks the sandbox driver for an environment.",
   "note": "not offered: outside the product's scope - trials are explicitly created by the orchestrator per test case, not woken automatically by an inbound network request.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Machines persist across restarts, and any OCI image works, including ones you build locally.",
   "note": "Disk state survives stop/start.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Declare a machine in a Smolfile: image, resources, ports, mounts and network policy in one checked-in file.",
   "note": "Smolfile 'mounts' plus -v host-dir mount flags document attachable volumes/directories.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "When the trial finishes, the machine is destroyed.",
   "note": "derived: trial VMs are ephemeral by design and are torn down automatically once the run ends, functioning like an auto-stop rather than a persistent always-on VM.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Defaults: 4 vCPUs, 8 GiB RAM. Memory is elastic via virtio balloon and idle vCPUs sleep in the hypervisor... Override with --cpus and --mem.",
   "note": "CPU/RAM are set at machine-creation time (--cpus/--mem); memory ballooning is automatic elasticity, not a customer-triggered live resize API for a running machine.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "runs agents against replicated production environments derived from real traffic",
   "note": "not offered: outside the product's scope - customers bring their own agent/run command; no preinstalled coding-agent harness templates (Claude Code, Codex, etc.) documented.",
   "checked": "2026-09-30"
  },
  "harness_api": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "runs agents against replicated production environments derived from real traffic",
   "note": "not offered: outside the product's scope - no first-party API to drive a preinstalled coding harness.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform",
   "note": "not offered: outside the product's scope - Chronicle evaluates the customer's own agent; it does not offer its own browser/computer-use/research task agent.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://api.github.com/orgs/chronicle-labs-ai/repos",
   "quote": "docs, chronicle-typescript, chronicle-python, chronicle-go, chronicle-java, chronicle-dotnet, chronicle-rust, studio-desktop",
   "note": "No MCP-server repo/package found in Chronicle Labs' public GitHub org or docs as of check date.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://pypi.org/pypi/chroniclelabs/json",
   "quote": "pip install chroniclelabs ... The ChronicleLabs Python library provides convenient access to the ChronicleLabs APIs from Python.",
   "note": "First-party Python SDK (chroniclelabs on PyPI, chronicle-labs-ai/chronicle-python on GitHub) for the Chronicle API.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://raw.githubusercontent.com/chronicle-labs-ai/chronicle-typescript/main/README.md",
   "quote": "npm i -s @chroniclelabs/api-client ... The ChronicleLabs TypeScript library provides convenient access to the ChronicleLabs APIs from TypeScript.",
   "note": "First-party TypeScript/Node SDK (@chroniclelabs/api-client).",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "networking is disabled by default, and enabling it requires an explicit domain allowlist.",
   "note": "not offered: outside the product's scope - trial microVMs run with no network by default and no public-IP exposure documented.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "networking is disabled by default, and enabling it requires an explicit domain allowlist.",
   "note": "not offered: outside the product's scope - no documented feature to reach a port on the trial VM via a public HTTPS URL; egress-only allowlisting is the documented network model.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "smolvm machine run --net --image alpine --allow-host-pattern registry.npmjs.org -- wget -qO- https://registry.npmjs.org   # exact host only",
   "note": "Egress control is documented at the domain/hostname-pattern and CIDR level (--allow-host, --allow-host-pattern, --allow-cidr); no HTTP method/path-level rule granularity is documented.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "We are also watching smolvm's GPU path—Vulkan through virtio-gpu and CUDA API remoting—as a way to bring heavier scoring models inside the isolation boundary rather than running them beside it.",
   "note": "GPU support in the smolvm substrate is exploratory/roadmap per Chronicle's own blog, not a currently shipped Chronicle product feature.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs integrates with 100+ production tools",
   "note": "not offered: outside the product's scope - trial guests are Linux-only microVMs (card already sets linux:true, others null); no Windows guest machines.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Each workload runs in a hardware-virtualized VM with its own guest kernel on Hypervisor.framework (macOS), KVM (Linux), or the Windows Hypervisor Platform (Windows)",
   "note": "macOS/Windows are only supported as smolvm *hosts*; the guest is always Linux, so no macOS guest machines are offered.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "macOS Apple Silicon | arm64 Linux ... Linux aarch64 | aarch64 Linux | KVM (/dev/kvm)",
   "note": "The smolvm substrate supports arm64 Linux guests on both Apple Silicon and Linux aarch64 hosts.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform that turns production data into staging environments",
   "note": "not offered: outside the product's scope - Chronicle Labs itself is a hosted SaaS platform (sign up / book a demo); only the separate open-source smolvm substrate tool is self-hostable, not the Chronicle product.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is a Y Combinator-backed company building infrastructure for teams running AI agents in production.",
   "note": "Chronicle Labs' own platform is closed-source SaaS. Its VM substrate, smolvm, is separately open source under Apache-2.0, but that is a different project (smol-machines), not the Chronicle Labs product.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://raw.githubusercontent.com/smol-machines/smolvm/main/README.md",
   "quote": "Each workload runs in a hardware-virtualized VM with its own guest kernel on ... KVM (Linux) ... libkrun is the VMM and libkrunfw supplies the guest kernel.",
   "note": "derived: Chronicle's trial sandbox (smolvm/libkrun) is a single-level hardware microVM that consumes the host's /dev/kvm; none of smolvm's docs (README, limitations.md, gpu.md, kubernetes.md, security-model.md) mention exposing /dev/kvm or nested virtualization support inside the guest itself, so running a further VM/emulator inside the trial sandbox is not documented as available.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "In the fleet, smolvm runs on KVM. On an engineer's Mac, it runs on Hypervisor.framework.",
   "note": "derived: trials run on Chronicle's own cloud fleet (standard KVM hosts); no residential/mobile/dedicated egress-IP product is documented anywhere (site, llms.txt, smolvm docs). Egress, when enabled at all, is a domain allowlist at the VM boundary, not a residential/mobile IP feature, so outbound traffic is ordinary datacenter-hosted IP space.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://chronicle-labs.com/blog/how-we-run-thousands-of-isolated-agent-trials-with-smolvm",
   "quote": "smolvm adds a second, independent layer at the VM boundary: networking is disabled by default, and enabling it requires an explicit domain allowlist.",
   "note": "No dedicated/fixed outbound IP feature is documented. Chronicle's and smolvm's egress controls are domain/CIDR allowlists (deny_all / mocked_only / passthrough_record policies), not a static per-machine egress IP offering.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://chronicle-labs.com/llms.txt",
   "quote": "Chronicle Labs is an AI agent testing and validation platform that turns production data into staging environments, so teams can prove their agents work before shipping.",
   "note": "not offered: outside the product's scope. Chronicle is a hosted SaaS evaluation platform (trials run in Chronicle's own fleet); no page (site, llms.txt/llms-full.txt, docs, blog) describes a managed deployment into a customer's own cloud account/VPC.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://chronicle-labs.com/privacy",
   "quote": "Data storage. Personal information is stored in secure servers located in the United States. For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.",
   "note": "Chronicle's own privacy policy states data is stored in the United States (with GDPR-compliant international transfer safeguards for EU users), not that customers can choose to keep machines/data resident in an EU region. No EU region option is offered.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": 720,
   "source": "https://docs.chronicle-labs.com/api-reference/worldsmith.md",
   "quote": "`ttl_hours` is how long the twins live (default 72, max 720).",
   "note": "Chronicle's product doesn't rent a generic long-running VM; the closest documented session lifetime is a world's service-twin environment (the sandbox trials run against), which lives for ttl_hours with a default of 72h and a hard max of 720h (30 days) before Chronicle stops it automatically. Individual agent trials inside a twin's lifetime are typically much shorter but no separate fixed per-trial time limit is published.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://chronicle-labs.com/",
   "quote": "No public price, no CPU/RAM tariff; sales/demo-led with a free signup. /pricing returns 404 and no rates are published anywhere.",
   "note": "granularity: account-only; cost: no; Chronicle Labs is a sales/demo-led AI agent testing platform with no published pricing API. The SDKs (Python, TypeScript) and all public documentation provide endpoints for creating trials, worlds, and managing runs, but no billing/usage tracking endpoint is documented. Usage and costs are handled through direct sales and customer relationships, not through programmatic API access.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://chronicle-labs.com/privacy",
 "locations_quote": "Personal information is stored in secure servers located in the United States.",
 "locations_checked": "2026-10-01"
}