{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": true,
  "nested_virt": null,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": true,
  "desktop_control": true,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": true,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": false,
  "kernel_features": false,
  "burst": null
 },
 "company": {
  "id": "cua",
  "checked": "2026-09-30",
  "company": "Cua (trycua)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/cua",
   "quote": "Give every agent a cloud desktop. Built for Claude Code Spring 2025"
  },
  "stage": {
   "value": "pre-seed",
   "source": "https://www.ycombinator.com/companies/cua",
   "quote": "Batch: Spring 2025 ... Team Size: 3 ... Status: Active ... Location: San Francisco ... Primary Partner: Diana Hu",
   "confidence": "medium",
   "note": "At least pre-seed: went through Y Combinator (Spring 2025), which invests in every company it takes; no later round found.",
   "derived": true
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Spring 2025",
    "source": "https://www.ycombinator.com/companies/cua",
    "quote": "Batch: Spring 2025 ... Team Size: 3 ... Status: Active ... Location: San Francisco ... Primary Partner: Diana Hu",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [
   "Y Combinator"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 3,
   "source": "https://www.ycombinator.com/companies/cua"
  },
  "note": "Cua (github.com/trycua, product site cua.ai, formerly branded 'c/ua'/trycua.com) is a Y Combinator Spring 2025 batch company (YC page lists it Active, team size 3, San Francisco, primary partner Diana Hu), confirming the hint: same company, same cua.ai domain. Founders are Francesco (frabonacci) and Alessandro per their April 2025 'Launch HN' post; the open-source core (Lume, cua/computer-use framework) predates and underlies the hosted Cua Fleet product this card prices. No publicly disclosed funding round, total raised, or revenue/ARR figure was found beyond YC's standard participation — treat funding stage, amount, and revenue as unknown rather than guessed. A buyer should independently verify current funding via Crunchbase/PitchBook (paywalled, inaccessible in this session) or direct company contact before relying on financial solidity claims."
 },
 "id": "cua",
 "name": "Cua Fleet",
 "url": "https://cua.ai/pricing",
 "category": "agent-sandbox",
 "isolation": "gvisor",
 "modes": [
  {
   "key": "on-demand",
   "label": "Fleet Linux sandbox, Ubuntu 24.04 gVisor container (cloud default), rate not published",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "gvisor",
    "image_oci": true
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Image.linux() / any OCI rootfs runs as a gVisor pod in the cloud (\"Rootfs on gVisor ... amd64 only\", runtime-support). Warm replicas \"are billed, whether or not anything claims them\" (https://cua.ai/docs/fleets/guides/warm-pools.md). Rate no longer published: https://cua.ai/pricing (checked 2026-10-14) lists only Cua Spaces plans and says Cua does not rent machines, while the Fleets docs still say \"Usage is billed while a sandbox runs\" (https://cua.ai/docs/fleets/quickstart.md). The former $0.044625/vCPU-h and $0.0223125/GiB-h card (cua.ai/pricing, 2026-09-28) is gone, so vcpu_h/ram_gib_h are null."
  },
  {
   "key": "linux-vm",
   "label": "Fleet Linux sandbox, Ubuntu 24.04 KubeVirt VM (kind=\"vm\"), rate not published",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "vm",
    "image_oci": false
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Image.linux(kind=\"vm\") boots the ghcr.io/trycua/linux:24.04-disk containerDisk as a KubeVirt VM (runtime-support). Custom VM images must be a containerDisk (qcow2 at /disk/disk.img), not an ordinary OCI app image. Rate no longer published: https://cua.ai/pricing (checked 2026-10-14) lists only Cua Spaces plans and says Cua does not rent machines, while the Fleets docs still say \"Usage is billed while a sandbox runs\" (https://cua.ai/docs/fleets/quickstart.md). The former $0.044625/vCPU-h and $0.0223125/GiB-h card (cua.ai/pricing, 2026-09-28) is gone, so vcpu_h/ram_gib_h are null."
  },
  {
   "key": "windows",
   "label": "Fleet Windows Server 2022 KubeVirt VM, rate not published",
   "flags": [],
   "os": [
    "windows"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "vm"
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Image.windows() boots ghcr.io/trycua/windows:2022-disk as a KubeVirt VM with EFI (runtime-support); Windows 11 is rejected in the cloud. Images carry no commercial Windows licence (BYOL, os-image-catalog); licence cost not priced (windows_vcpu_h null, not 0). Rate no longer published: https://cua.ai/pricing (checked 2026-10-14) lists only Cua Spaces plans and says Cua does not rent machines, while the Fleets docs still say \"Usage is billed while a sandbox runs\" (https://cua.ai/docs/fleets/quickstart.md). The former $0.044625/vCPU-h and $0.0223125/GiB-h card (cua.ai/pricing, 2026-09-28) is gone, so vcpu_h/ram_gib_h are null."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false
 },
 "plans": [
  {
   "name": "Cua Fleet usage-based",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "No plan fee; usage billed while a sandbox runs (https://cua.ai/docs/fleets/quickstart.md), rate unpublished since the 2026-10 pricing page change. The Cua Spaces Free/Pro $12/Teams $30-per-seat plans on cua.ai/pricing are relay/sharing subscriptions for machines you bring, not Fleet compute, so they are not modelled as plans here."
  },
  {
   "name": "Enterprise (BYOC / on-prem)",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "BYOC and on-prem deployments available; pricing unpublished."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": true,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": null,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "regions": [
   "us"
  ],
  "soc2": true,
  "hipaa": false,
  "sso": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "browser_control": true,
  "desktop_control": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "ip_note": "Egress IP type, proxies and static IPs not documented.",
  "isolation": "gvisor",
  "image_oci": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "perf_source": "No benchmark row: provider is not in ComputeSDK results or the HPC run (as of 2026-09-28). See research/perf-map.json.",
 "knobs": [
  {
   "id": "warm_pool_overhead",
   "label": "Warm pool replica-hours per claimed session-hour",
   "kind": "slider",
   "min": 1,
   "max": 3.5,
   "step": 0.1,
   "default": 1,
   "unit": "x",
   "options": null,
   "effect": "hours_factor",
   "modes": null,
   "why": "Cua Fleet bills warm pool replicas until the pool is scaled down or deleted, whether or not a claim is using them; TTL counts from creation, not idle. 1 = pool scaled exactly to use; ~3.3 = 8 h/day workload with the pool left warm 24/7."
  }
 ],
 "caveats": [
  "Unpriced since 2026-10-14: cua.ai/pricing now lists only Cua Spaces plans (Free $0, Pro $12/month, Teams $30/seat/month, billed on live sessions and relay hours) and says \"Does Cua host or rent the machines? No.\" The Fleets docs still bill cloud usage (\"Usage is billed while a sandbox runs; releasing it ends the charge.\", https://cua.ai/docs/fleets/quickstart.md) and the app has an OUT_OF_CREDIT notice, but no vCPU, RAM, disk or egress rate is published. The former $0.044625/vCPU-h and $0.0223125/GiB-h are no longer used.",
  "Cloud isolation depends on the image: any OCI rootfs (including the default Image.linux()) runs as a gVisor container; a containerDisk (qcow2 at /disk/disk.img) runs as a KubeVirt VM; Windows Server 2022 is always a KubeVirt VM. amd64 only. Windows 11, macOS and Android are rejected in the cloud.",
  "Image layers (apt_install, pip_install, uv_install, app_install, run) are described in a cua.ai Image resource and built with `cua image build` on your machine, then pushed to a registry; cloud builds from layers are \"not available yet\" (a cloud sandbox with layers fails), per https://cua.ai/docs/fleets/guides/images.md and runtime-support.",
  "No cloud macOS: images.md lists the macOS (Lume) cloud runtime as \"Not offered\" and cloud.md says \"No macOS.\"; macOS runs only locally with Lume on Apple silicon.",
  "Managed pools cap at 10 sandboxes per image and shape by default (raise with CloudOptions(max_pool_size=...)), are deleted after 30 minutes idle, and claims lapse 15 minutes after the process stops renewing them. \"A released sandbox may be recycled, so copy results out first.\"",
  "Open source: SDK, Cua Driver and Lume are MIT; Cua Spaces is source-available under FSL-1.1-MIT (becomes MIT two years after each release).",
  "Region: the Fleets docs name no region; the Sandbox reference still defaults region to us-east-1 (https://cua.ai/docs/cua-sdk/reference/python/sandbox.md).",
  "Disk size per sandbox and any disk/storage price are unpublished (included_disk_gib and disk_gib_month null, unknown, not free). SSH is not documented for cloud sandboxes (control goes through cua-spacesd via the gateway).",
  "Pool-based billing: \"Warm replicas consume capacity, and are billed, whether or not anything claims them\" (https://cua.ai/docs/fleets/guides/warm-pools.md). If a rate is published again, session hours only match cost if the pool is scaled to demand (see warm_pool_overhead knob).",
  "SOC 2 Type I (not Type II). BYOC and on-prem available via sales.",
  "Legacy 2025 Cua Cloud Sandbox sizes (Small 1/4, Medium 2/8, Large 8/32) had no published prices; superseded by Fleet per-resource pricing.",
  "Third-party guides mention a free dev tier; not on the official pricing page (free credits set 0).",
  "No benchmark data in benchmarks.json.",
  "Windows: Cua images do not include a commercial Windows licence (BYOL); the estimate excludes licence cost. Source: https://cua.ai/docs/reference/sandbox-sdk/os-image-catalog",
  "Snapshots: older marketing said 'fork from snapshots', but cua-sandbox 0.9.0 docs say Sandbox.snapshot() is unimplemented for Fleet and Fleet rejects snapshot-derived images; card keeps snapshot 'none' per the versioned docs (conflict noted).",
  "Closing a connection, releasing a claim and deleting a pool are separate; warm pool capacity keeps billing until the pool is scaled down/deleted (keep_pool can preserve pools)."
 ],
 "sources": [
  "https://cua.ai/pricing",
  "https://cua.ai/",
  "https://cua.ai/docs/fleets.md",
  "https://cua.ai/docs/fleets/quickstart.md",
  "https://cua.ai/docs/fleets/guides/images.md",
  "https://cua.ai/docs/cua-sdk/guides/cloud.md",
  "https://cua.ai/docs/cua-sdk/guides/lifecycle.md",
  "https://cua.ai/docs/fleets/guides/capacity-and-claims.md",
  "https://cua.ai/docs/fleets/guides/warm-pools.md",
  "https://cua.ai/docs/fleets/guides/claim-secrets.md",
  "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
  "https://cua.ai/docs/cua-sdk/reference/python/sandbox.md",
  "https://cua.ai/docs/cua-sdk/reference/os-image-catalog",
  "https://cua.ai/docs/cua-sdk/reference/spaces/account-app-core.md",
  "https://cua.ai/trust",
  "https://cua.ai/docs/llms-full.txt"
 ],
 "audit_2026_09_29": {
  "applied": 3,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 7
 },
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": 0,
  "raise": null,
  "raise_time_days": null,
  "verification": "Payment method required before creating pools",
  "tiers": null,
  "notes": "No published account quota. Managed pools (local=False) autoscale from zero to max_pool_size 10 per image and shape (\"one image runs at most 10 at once unless you raise CloudOptions(max_pool_size=...)\", lifecycle.md), self-serve; canonical images keep one warm. Managed pools are deleted after 30 minutes idle; sandbox claim TTL 15 minutes by default, renewed while a process holds it. Own pools set replicas or autoscaling bounds.",
  "sources": [
   "https://cua.ai/docs/fleets.md",
   "https://cua.ai/docs/cua-sdk/guides/lifecycle.md",
   "https://cua.ai/docs/cua-sdk/guides/cloud.md",
   "https://cua.ai/docs/fleets/guides/capacity-and-claims.md"
  ],
  "researched": "2026-10-14"
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "Fleet has no snapshot mechanism at all in cua-sandbox 0.7.0 docs; claims are released/deleted (warm pool replicas, TTL from creation), no documented auto-save on idle/stop. CLI `cua sb suspend` ('preserving memory state') applies to local/retired legacy VM API; for Fleet claims docs say use close()/Pool.delete().",
   "checked": "2026-10-14"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "Conflict: homepage markets 'Fork from snapshots, reproduce failures' (https://cua.ai/), but versioned SDK docs (0.7.0; PyPI now 0.8.0 whose release notes add nothing on snapshots) say not implemented; reusable state must be a prebuilt containerDisk boot artifact.",
   "checked": "2026-10-14"
  },
  "harness_api": {
   "value": false,
   "source": "https://cua.ai/docs/reference/cua-cli/cli-reference.md",
   "quote": "Command reference for the cua CLI: authentication, sandboxes, images, platforms, one-shot automation, skills, and trajectories.",
   "note": "No first-party API to start/stream/resume an agent harness in a Fleet VM. Cua exposes computer-use control (computer-server, Cua Driver MCP, shell/exec, files). Guides show users running Codex, Cursor Cloud Agent workers, OpenAI Agents API executors and OpenClaw inside Fleet VMs with their own controllers; Claude Code/Codex connect to Cua Driver over MCP from outside. Those are integrations, not a harness API.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://cua.ai/docs/how-to-guides/sandbox/share-service-with-signed-url.md",
   "quote": "Use a signed service URL when a person or external system needs temporary access to a service running inside a Fleet sandbox. The URL is public, time-limited, and revocable. Requests still route only to the named service on the bound sandbox.",
   "note": "Only services declared on the pool template (name, target_port, protocol, e.g. ssh:22, server:8000) are reachable; default access is authenticated named-service requests via Fleet credentials ('Use `sb.services.request()` for authenticated requests to a named service', runtime-support); signed URLs 60 s-24 h, list/revoke. No IP allowlists documented.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Fleet VMs are KubeVirt (KVM) guests booted from a containerDisk with root/admin; own kernel so iptables/nftables (Linux) or Windows Firewall should work. Not documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": false,
   "source": "https://cua.ai/docs/fleets/guides/claim-secrets.md",
   "quote": "when a claim\nbinds, Fleet delivers a Secret into the already-running sandbox, and the guest\nreads it at `/run/cua/env-token`.",
   "note": "Claim secrets put a per-claim cua-spacesd token inside the guest; other credentials \"still go in at runtime\" (secrets guide). No proxy that injects credentials outside the sandbox.",
   "checked": "2026-10-14"
  },
  "anti_bot": {
   "value": false,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "This attachment route does not promise fewer CAPTCHAs or bypass site checks. Sites can still use network reputation, account history, browser state, and interaction patterns.",
   "note": "Docs explicitly disclaim any stealth/fingerprint-evasion capability; Cua ships a real browser/desktop but no anti-bot feature.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "This attachment route does not promise fewer CAPTCHAs or bypass site checks.",
   "note": "No CAPTCHA-solving service is offered; product is a computer-use/browser automation driver, not a CAPTCHA solver.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://cua.ai/pricing",
   "quote": "Run computer-use agent training, eval, and data-generation workloads in parallel on Linux, Windows, macOS, and Android machines.",
   "note": "Fleet VMs run on cloud (KubeVirt/Kubernetes) infrastructure in the provider's own region (us-east-1); no residential/mobile IP product is mentioned anywhere, so egress is ordinary datacenter IP space. Not explicitly documented (medium confidence, derived).",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "A fork requires a snapshot of state to start a new machine from; the versioned docs say this mechanism is not implemented for Fleet (conflicts with older marketing copy 'Fork from snapshots, reproduce failures' on the homepage, which the docs supersede).",
   "checked": "2026-10-14"
  },
  "fork_running": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "No fork mechanism exists at all for Fleet, so cloning a running machine is not possible.",
   "checked": "2026-10-14"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "No snapshot/fork mechanism at all, so no memory-preserving fork exists.",
   "checked": "2026-10-14"
  },
  "pause_resume": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/guides/lifecycle.md",
   "quote": "Suspend, resume and restart\nare local only: in the cloud `suspend` and `restart` raise `Unsupported`, and\n`resume` of a running sandbox reconnects.",
   "note": "Cloud sandboxes are released or lapse after their claim TTL; there is no billed-down paused state.",
   "checked": "2026-10-14"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://cua.ai/docs/how-to-guides/sandbox/expire-pools-and-claims",
   "quote": "Registry access, account permissions, resource limits, capacity, and readiness are deployment requirements that SDK validation cannot establish.",
   "note": "Fleet pools scale warm replicas to zero when idle (auto_stop_idle true) but a claim() call actively provisions/claims a replica synchronously; no documentation of a stopped machine automatically waking on an inbound network request to an exposed port.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://cua.ai/docs/fleets/guides/capacity-and-claims.md",
   "quote": "A released sandbox may be recycled, so copy\nresults out first.",
   "note": "No stopped-with-disk-kept state for Fleet sandboxes: releasing returns or deletes the sandbox, an expiring pool \"deletes its sandboxes too\", and cloud suspend raises Unsupported (lifecycle.md).",
   "checked": "2026-10-14"
  },
  "volume_attach": {
   "value": false,
   "source": "https://cua.ai/docs/reference/sandbox-sdk/runtime-support.md",
   "quote": "Prebuilt registry artifact | Requires a compatible runtime and bootable guest payload | Accepted as the boot artifact; software must already be installed",
   "note": "No documented mechanism to attach an extra persistent volume to a Fleet VM; state must be baked into the boot containerDisk artifact.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://cua.ai/docs/reference/sandbox-sdk/runtime-support.md",
   "quote": "Prebuilt registry artifact | Requires a compatible runtime and bootable guest payload | Accepted as the boot artifact; software must already be installed",
   "note": "No shared-volume feature documented; not offered.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://cua.ai/docs/reference/sandbox-sdk/pool.md",
   "quote": "`Pool.apply()` derives and reconciles both the pool and its template.",
   "note": "CPU/RAM are fixed on the pool template (cpu_cores/memory) at pool creation; no documented way to resize a running claimed VM's resources without recreating/re-templating the pool.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://cua.ai/docs/reference/cua-cli/cli-reference.md",
   "quote": "Command reference for the cua CLI: authentication, sandboxes, images, platforms, one-shot automation, skills, and trajectories.",
   "note": "No coding-agent harness (Claude Code, Codex, OpenCode, etc.) is preinstalled or offered as a template; guides show users bringing their own agent controllers (Codex, Cursor Cloud Agent, OpenAI Agents API, OpenClaw) into Fleet VMs. Cua provides the computer-use driver/MCP layer, not preinstalled coding-agent harnesses.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://cua.ai/pricing",
   "quote": "Cua Driver: The open-source background computer-use driver for native desktop apps. It lets agents click, type, scroll, inspect accessibility trees, and capture window state through the same MCP/CLI surface without stealing your cursor or focus.",
   "note": "Cua Driver is a control surface (MCP/CLI) for driving whatever agent/model the caller brings; there is no first-party hosted task agent (browser/computer-use/research agent) that Cua itself runs and exposes via API — the caller supplies the model/agent loop.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "The TypeScript Fleet SDK provides separate Node.js and browser entry points. ... npm install @trycua/fleet@0.1.2",
   "note": "First-party TypeScript/Node.js SDK (@trycua/fleet) for creating pools and claiming/driving Fleet sandboxes; Node.js 20+ required.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://cua.ai/docs/reference/sandbox-sdk/runtime-support.md",
   "quote": "Fleet lifecycle through `FleetCloudTransport` | Implemented for numeric ports | Resolves the matching authenticated named-service URL; the template must declare the service",
   "note": "Access to Fleet VM ports/services is via Fleet's authenticated proxy/service-URL layer, not a directly-addressable public IPv4 per machine. Card's network.ipv4_available is already false.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://cua.ai/docs/how-to-guides/sandbox/secrets.md",
   "quote": "Pass task-specific credentials from the host into a sandbox at runtime. ... Shell quoting prevents shell interpretation; it does not redact command logs, traces, process inspection, or application output.",
   "note": "No HTTP method/path-level egress rule feature documented anywhere; only inbound named-service/signed-URL access control is documented (ingress_rules true), not egress.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://cua.ai/trust",
   "quote": "Cua has completed its SOC 2 Type I examination. The SOC 2 Type II audit is in progress.",
   "note": "Trust center lists only SOC 2 Type I (complete) and Type II (in progress); no HIPAA/BAA mention anywhere on the trust/security page or docs.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://cua.ai/trust",
   "quote": "Cua has completed its SOC 2 Type I examination. The SOC 2 Type II audit is in progress.",
   "note": "No SAML/OIDC SSO feature is mentioned on the trust/security page, pricing page, or docs; early-stage compliance program (SOC 2 Type I only) with no SSO claim.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://cua.ai/docs/cua-sdk/reference/python/sandbox.md",
   "quote": "| `region` | `str` | `'us-east-1'` | Cloud region (default `\"us-east-1\"`). |",
   "note": "The us-east-1-only line is gone from runtime-support, and the Fleets docs name no region, but the Sandbox reference still defaults region to us-east-1 and no EU region is documented.",
   "checked": "2026-10-14"
  },
  "snapshot": {
   "value": "none",
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "| `Sandbox.snapshot()` | Not implemented | Not implemented; snapshot-derived images are rejected |",
   "note": "cua-sandbox 0.9.0 docs: snapshot is unimplemented locally and in the cloud, and the cloud rejects snapshot-derived images.",
   "checked": "2026-10-14"
  },
  "image_oci": {
   "value": true,
   "corrected_from": false,
   "source": "https://cua.ai/docs/fleets/guides/images.md",
   "quote": "| Container rootfs (any OCI image) | `gvisor` pod | Docker or Podman, gVisor when installed |",
   "note": "Any amd64 OCI image from a public or private registry boots as a gVisor container (runtime-support: \"Rootfs on gVisor, containerDisk on KubeVirt; amd64 only\"). VM sandboxes still need a containerDisk (qcow2 at /disk/disk.img), so the linux-vm and windows modes keep image_oci false.",
   "checked": "2026-10-14"
  },
  "gpu": {
   "value": false,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "Lume VMs use Apple's paravirtualized GPU bridge ... it does not pass a physical GPU to the guest, patch the host, or change ... The sandbox GPU is the *Microsoft Basic Display Adapter*, which offers OpenGL 1.1.",
   "note": "No dedicated/physical GPU instance type is offered anywhere on the pricing or docs pages; Windows Fleet guests get only a software display adapter and macOS guests get a paravirtualized graphics bridge (no passthrough). No CUDA/NVIDIA GPU offering found.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "corrected_from": true,
   "source": "https://cua.ai/docs/cua-sdk/guides/cloud.md",
   "quote": "Public or [private](</docs/cua-sdk/guides/images#private-registries>) registry\n  images, amd64 only: containers under gVisor, containerDisks as KubeVirt VMs.\n  No macOS.",
   "note": "Cloud macOS is no longer offered: images.md lists macOS (Lume) cloud runtime as \"Not offered\", runtime-support marks Image.macos() \"Rejected\" in the cloud, and cua.ai/macos now redirects to the homepage, which markets only local macOS Spaces built with Lume. Cloud-macos mode removed.",
   "checked": "2026-10-14"
  },
  "arm64": {
   "value": false,
   "corrected_from": true,
   "source": "https://cua.ai/docs/cua-sdk/reference/runtime-support.md",
   "quote": "The\ncloud runs amd64 only, so a Linux image must have an amd64 variant.",
   "note": "The 2026-09-30 true rested on the hosted Cloud macOS (Apple Silicon) product, which is no longer offered; Fleets docs also say \"Pools run containers under gVisor and VMs under KubeVirt, amd64 only\" (https://cua.ai/docs/fleets.md). arm64 exists only for local runtimes.",
   "checked": "2026-10-14"
  },
  "docker_inside": {
   "value": true,
   "source": "https://cua.ai/pricing",
   "quote": "LINUX Browser and code work. Run Ubuntu containers or full VMs with browser, terminal, Python, and package installs.",
   "note": "derived: Fleet Linux guests are full root-access Ubuntu 24.04 VMs (own kernel, KubeVirt/KVM) with package installs advertised; nothing in the docs restricts installing/running Docker inside the guest the way Fleet explicitly restricts build-time image customization (apt_install/pip_install/run rejected only for the *image build* path, not for commands run inside a live claimed sandbox via shell.run()). Not explicitly documented either way.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "restrict egress to `api.openai.com`, `codex-cloud-environments.chatgpt.com`, and workload-specific destinations;",
   "note": "This and similar 'restrict outbound access' lines are production-hardening advice telling the *user* to implement their own network policy (e.g. inside the guest OS); no provider-side egress allowlist/deny-list, no-internet mode, or security-group egress control is documented anywhere for Fleet.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://cua.ai/pricing",
   "quote": "Run computer-use agent training, eval, and data-generation workloads in parallel on Linux, Windows, macOS, and Android machines.",
   "note": "No static/fixed/elastic outbound IP product or add-on is mentioned on the pricing or docs pages; egress is ordinary shared datacenter IP space per the card's existing egress_ip_type='datacenter' (not documented).",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://cua.ai/docs/fleets/guides/capacity-and-claims.md",
   "quote": "| Sandbox TTL | Every cloud sandbox | `CloudOptions(claim_ttl=...)`, `--claim-ttl`; `keep_alive` | Yes, while a process holds it |",
   "note": "No platform maximum: the claim TTL (15 minutes by default) is renewed while a process holds the sandbox and can be extended with keep_alive; creation-age TTLs are opt-in. Managed pools are deleted after 30 minutes idle (https://cua.ai/docs/fleets.md).",
   "checked": "2026-10-14"
  },
  "usage_api": {
   "value": false,
   "source": "https://cua.ai/docs/llms-full.txt",
   "quote": "A pool with one replica keeps cloud capacity available and can incur usage charges until it is deleted. Deleting the pool is a separate operation that removes its capacity and state.",
   "note": "granularity: account-only; Cua Fleet SDK, CLI, and MCP server documentation provide no endpoint, CLI command, or API call to retrieve billable usage per sandbox, per tag, per project, or by any segmentation other than account-wide. Billing is based on pool replica-hours and resource allocation (vCPU-hours, RAM-hours), tracked per pool but not queryable programmatically; usage is only available through the account dashboard. No REST API for usage metrics, cost queries, or billing data is documented anywhere in the public SDK, CLI reference, or docs.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "isolation": {
   "value": "gvisor",
   "source": "https://cua.ai/docs/fleets.md",
   "quote": "Pools run containers under gVisor and VMs under KubeVirt,\namd64 only",
   "note": "The canonical Linux image runs in the cloud as a gVisor container (\"cua sb create linux --on cloud --name demo  # a gVisor container\", cloud.md); kind=\"vm\" gives a KubeVirt VM, and Windows is always a KubeVirt VM. Card-level isolation follows the default; the linux-vm and windows modes carry isolation \"vm\".",
   "checked": "2026-10-14"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://cua.ai/docs/fleets.md",
   "quote": "| Cleanup | Deleted after 30 minutes idle | You delete it, or set a TTL |",
   "note": "Managed pools (local=False) scale from zero and are deleted after 30 minutes idle (CUA_FLEET_POOL_IDLE_GC, \"off\" disables it); a sandbox lapses its claim TTL (15 min default) after the process stops renewing it. Own pools need idle_ttl or a manual delete.",
   "checked": "2026-10-14"
  },
  "open_source": {
   "value": true,
   "source": "https://cua.ai/pricing",
   "quote": "Cua Spaces is source-available under FSL-1.1-MIT: you can use and change it for anything except a competing product, and each release becomes MIT two years after it ships. Cua Driver and Lume are MIT.",
   "note": "True for the SDK, Cua Driver and Lume (MIT, trycua/cua on GitHub); Cua Spaces itself is source-available (FSL-1.1-MIT), not OSI open source.",
   "checked": "2026-10-14"
  },
  "soc2": {
   "value": true,
   "source": "https://cua.ai/trust",
   "quote": "Cua received its SOC 2 Type I report in May 2026.",
   "note": "Type I only; \"The SOC 2 Type II audit is in progress.\"",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "us-east-1",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://cua.ai/docs/cua-sdk/reference/python/sandbox.md",
 "locations_quote": "| `region` | `str` | `'us-east-1'` | Cloud region (default `\"us-east-1\"`). |",
 "locations_checked": "2026-10-14",
 "no_price_reason": "Fleet usage rate no longer published (cua.ai/pricing lists only Cua Spaces plans)"
}