{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": null,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "docker-cloud-sandboxes",
  "checked": "2026-09-30",
  "company": "Docker, Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/docker",
   "quote": "Docker Batch: Summer 2010 Team Size: 201 Status: Active"
  },
  "stage": {
   "value": "series-c",
   "source": "https://techcrunch.com/2022/03/31/as-docker-gains-momentum-it-hauls-in-105m-series-c-on-2b-valuation/",
   "quote": "Today, the company announced a $105 million Series C investment on a $2.1 billion valuation.",
   "confidence": "high",
   "note": "Last priced round found is the March 2022 Series C; no later priced round located as of check date."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Summer 2010",
    "source": "https://www.ycombinator.com/companies/docker",
    "quote": "Docker Software development platform. SUMMER 2010 ACTIVE ... http://docker.com",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": 163000000,
   "status": "confirmed",
   "basis": "TechCrunch quoting the company: cumulative raise since Docker's 2019 restructuring (sale of its enterprise business, refocusing on the developer product now sold, including as Docker Cloud Sandboxes)",
   "source": "https://techcrunch.com/2022/03/31/as-docker-gains-momentum-it-hauls-in-105m-series-c-on-2b-valuation/",
   "quote": "The company has raised $163 million in its current guise on that $2.1 billion valuation."
  },
  "last_round": {
   "type": "series-c",
   "amount_usd": 105000000,
   "date": "2022-03",
   "leads": [
    "Bain Capital Ventures"
   ],
   "status": "confirmed",
   "source": "https://techcrunch.com/2022/03/31/as-docker-gains-momentum-it-hauls-in-105m-series-c-on-2b-valuation/",
   "quote": "Today’s investment was led by new investor Bain Capital Ventures with participation from Atlassian Ventures, Citi Ventures, Vertex Ventures and Four Rivers, along with existing investors Benchmark Capital, Insight Partners and Tribe Capital."
  },
  "investors": [
   "Bain Capital Ventures",
   "Benchmark Capital",
   "Insight Partners",
   "Tribe Capital",
   "Atlassian Ventures",
   "Citi Ventures",
   "Vertex Ventures",
   "Four Rivers",
   "Greylock",
   "Kima Ventures",
   "Lightspeed Venture Partners",
   "Salesforce Ventures"
  ],
  "portfolio_listings": [
   {
    "source": "Greylock",
    "company": "Docker",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Kima Ventures",
    "company": "Docker",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Lightspeed Venture Partners",
    "company": "Docker",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Salesforce Ventures",
    "company": "Docker",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value_usd": 50000000,
   "kind": "ARR",
   "as_of": "2022-01",
   "status": "confirmed",
   "basis": "TechCrunch reporting company-disclosed ARR",
   "source": "https://techcrunch.com/2022/03/31/as-docker-gains-momentum-it-hauls-in-105m-series-c-on-2b-valuation/",
   "quote": "A couple of months ago, the company announced that annual recurring revenue (ARR) had jumped 4x to over $50 million just two years after it decided to restructure."
  },
  "employees": {
   "value": 201,
   "source": "https://www.ycombinator.com/companies/docker"
  },
  "note": "YC hint confirmed: YC directory lists Docker (Summer 2010 batch, status Active, website http://docker.com), the same company/domain behind Docker Cloud Sandboxes. Docker was founded as dotCloud; it sold its enterprise business in 2019 and refocused on the developer product (Docker Desktop/Hub, and now Docker Cloud Sandboxes, launched 2026-09-24). Funding/revenue figures above are for Docker, Inc. as a whole (post-2019 restructuring), not broken out for the Cloud Sandboxes product specifically; no funding round or revenue figure has been found since March 2022 as of this check."
 },
 "id": "docker-cloud-sandboxes",
 "name": "Docker Cloud Sandboxes",
 "url": "https://www.docker.com/blog/introducing-cloud-sandboxes-start-on-your-laptop-finish-in-the-cloud/",
 "category": "agent-sandbox",
 "isolation": "vm",
 "modes": [
  {
   "key": "on-demand",
   "label": "Pay-as-you-go fixed sizes (micro..xl), per second",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "vm"
   },
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    2,
    2
   ],
   "ram_fixed_per_vcpu": 2,
   "vcpu_options": [
    1,
    2,
    4,
    8,
    16
   ],
   "min_vcpu": 1,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes": [
    {
     "name": "micro",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": null,
     "hour": 0.07,
     "month_cap": null
    },
    {
     "name": "small",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": 0.14,
     "month_cap": null
    },
    {
     "name": "medium",
     "vcpu": 4,
     "ram_gib": 8,
     "disk_gib": null,
     "hour": 0.28,
     "month_cap": null
    },
    {
     "name": "large",
     "vcpu": 8,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": 0.56,
     "month_cap": null
    },
    {
     "name": "xl",
     "vcpu": 16,
     "ram_gib": 32,
     "disk_gib": null,
     "hour": 1.12,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Linear $0.07 per (1 vCPU + 2 GiB)-hour, metered per second while running (allocation, not utilisation). Stopped sandboxes (memory + filesystem preserved) pay no compute. TTL default 1 h, extendable to max 24 h from creation; default on-timeout = stop if resumable else delete. amd64 or arm64 'subject to account availability'."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": 0,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": 0,
  "ipv4_month": null,
  "ipv4_available": false
 },
 "plans": [
  {
   "name": "Docker Agentic Platform (pay-as-you-go)",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 10,
   "max_session_h": 24,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes_allowed": null,
   "note": "No recurring fee; billed monthly in arrears on a personal Docker account, separate from any Docker Personal/Pro/Team/Business subscription (which is not needed and not credited). Account eligibility: 'the pay-as-you-go plan, available on Docker Personal and Pro accounts' (launch blog); 'Subscribe using your personal Docker account, including if you belong to an organization. The subscription is attached to your personal account.' (billing page). No org/team-owned billing documented. Default quotas: 10 concurrent, 50 stored sandboxes, 100 volumes. Quota increases: process/price unpublished."
  },
  {
   "name": "AI Governance (org policy add-on)",
   "fee": null,
   "flags": [
    "sales",
    "addon"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Organization-level sandbox policy governance, 'available on a separate paid subscription' (contact sales). Not a compute plan."
  }
 ],
 "extras": [
  {
   "item": "Model inference",
   "price": "BYO key, billed by your model provider (not by Docker; credits don't cover it)"
  },
  {
   "item": "Local Docker Sandboxes (sbx on your laptop)",
   "price": "Free, incl. commercial use; no Docker Desktop licence required"
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 25
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": false,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [],
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": null,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "isolation": "vm",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "perf_source": "No benchmark row: provider is not in ComputeSDK results or the HPC run (as of 2026-09-28). See research/perf-map.json.",
 "knobs": [
  {
   "id": "ttl_tail",
   "label": "Billed time per session vs useful time (sandboxes left to hit their TTL instead of being stopped)",
   "kind": "select",
   "min": null,
   "max": null,
   "step": null,
   "default": 1,
   "unit": null,
   "options": [
    {
     "value": 1,
     "label": "Stopped explicitly when done (×1)"
    },
    {
     "value": 1.5,
     "label": "Often left running until TTL (×1.5)"
    },
    {
     "value": 2,
     "label": "Always left until TTL (×2)"
    }
   ],
   "effect": "hours_factor",
   "modes": [
    "on-demand"
   ],
   "why": "Compute bills per second until the sandbox is stopped; the default TTL is 1 h, so an agent that finishes in 20 min but never stops keeps billing until expiry. Factor values are illustrative, not published."
  }
 ],
 "caveats": [
  "Launched 2026-09-24; only one published rate card. Enterprise/volume pricing not published.",
  "Default quota 10 concurrent sandboxes; higher concurrency process and cost unpublished (worked example of 50 concurrent needs a quota raise).",
  "Hard cap 24 h from creation per sandbox (renew-timeout cannot go beyond); long jobs must be stopped/restarted or recreated.",
  "Disk size per size tier not published (disk_gib null). Volumes are experimental and free; stopped-sandbox state storage free per 'Volumes, egress ... are free' and 'compute isn't billed while stopped'.",
  "'Always-on' sandbox configuration appears in quota docs but has no separate price; assumed same per-second rate.",
  "Standard one-time credit is $25 ($250 only for signups 2026-09-22..30). Credits expire 6 months after redemption; a valid credit card is required at signup. Credits cover sandbox compute only (setup, idle time and retries all count), not model-provider charges.",
  "Isolation: product page says MicroVM; hypervisor unnamed. Region(s) unpublished (regions []).",
  "Docker Pro/Team/Business subscription fees are separate and not needed; they do not include cloud sandbox credit.",
  "No benchmark data in benchmarks.json.",
  "All snapshots, including the one created when a sandbox is paused/stopped, are deleted after 7 days of non-use; stopped state is free but not durable storage.",
  "Volume-backed sandboxes can't be stopped (TTL action must be delete); volume data is snapshotted only on exit, last writer wins.",
  "Request rate limits exist and 'can vary by operation' but no numbers are published.",
  "24 h cap is per lifecycle: resuming a stopped sandbox starts a fresh lifecycle timer; accounts with always-on access can use the 'restart' timeout action (stop+resume cycles preserving memory) and keep their concurrency slot while stopped."
 ],
 "sources": [
  "https://www.docker.com/blog/introducing-cloud-sandboxes-start-on-your-laptop-finish-in-the-cloud/",
  "https://www.docker.com/products/docker-sandboxes/",
  "https://docs.docker.com/ai/sandboxes/cloud/usage/",
  "https://docs.docker.com/ai/sandboxes/cloud/local-vs-cloud/",
  "https://docs.docker.com/ai/sandboxes-api/limits/",
  "https://docs.docker.com/agentic-platform/signup/",
  "https://docs.docker.com/subscription-billing/plans/docker-agentic-platform/",
  "https://forums.docker.com/t/docker-sandbox-pricing-unclear/151790",
  "https://docs.docker.com/ai/sandboxes-api/cookbook/expose-a-port-from-a-cloud-sandbox/",
  "https://docs.docker.com/reference/api/sandboxes/latest/schemas/EffectiveCoreLifecycle/"
 ],
 "fleet": {
  "default_max_instances": 10,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": null,
  "tiers": "Default 10 concurrent, 50 stored; per-account overrides may differ.",
  "notes": "Official API limits give default 10 concurrent, 50 stored sandboxes; stopped releases concurrency unless always-on, but retains stored count. Docs warn accounts can differ and instruct confirmation with Docker before capacity-dependent work. No explicit numeric higher tier or quota-increase procedure/turnaround found.",
  "sources": [
   "https://docs.docker.com/ai/sandboxes-api/limits/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 11,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "wake_on_request": {
   "value": null,
   "source": "https://docs.docker.com/reference/api/sandboxes/latest/schemas/EffectiveCoreLifecycle/",
   "quote": "auto_resume is the configured authenticated auto-resume setting; absent means unknown. Snapshot readback preserves the capture-time value, not current support or a resume guarantee.",
   "note": "Unknown, was true. The API has an autoResume lifecycle field but no page says what triggers it or that an HTTP request to a published port wakes a stopped sandbox. Usage page documents resume only via attach or a named run ('A detached run with --name reuses the named sandbox and starts it if stopped'); expose-a-port cookbook says only 'Stopping the sandbox does not remove its port publications.'",
   "checked": "2026-10-14"
  },
  "snapshot_auto": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/usage/",
   "quote": "A cloud sandbox expires after one hour by default. On expiration, the service stops sandboxes that can be resumed and deletes the rest.",
   "note": "Trigger: TTL expiry (default 1 h, max 24 h from creation) with on-timeout 'stop' (the default for resumable sandboxes). Stop preserves memory AND filesystem ('Stop a cloud sandbox while preserving its memory and filesystem'; API: 'a backend advertising memory preservation hibernates it'), resumed via sbx --cloud attach or a named run ('A detached run with --name reuses the named sandbox and starts it if stopped'); no documented request-triggered wake (see wake_on_request). No idle-timeout trigger: the Console says a sandbox 'runs until you pause or delete it' or its timer expires. Always-on accounts get 'restart' = automatic stop/resume cycles preserving memory. Volume-backed sandboxes cannot be stopped (TTL action must be delete). Stopped-state snapshots are free but deleted after 7 days unused (per card).",
   "checked": "2026-10-14"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes-api/cookbook/snapshot-and-fork-a-sandbox/",
   "quote": "Save a sandbox's state so you can start another sandbox from the same point later. A snapshot is separate from its source sandbox; restoring it creates a new sandbox with its own identity.",
   "note": "API CreateSnapshot 'checkpoints a running sandbox; a stopped source is rejected'. captureMode 'disk' or 'all' ('all captures memory and disk and requires memory-capture support'). RestoreSnapshot 'forks a new sandbox from a snapshot' (fork, source untouched). CLI equivalent: sbx --cloud template save <sandbox> <template> then create --template. CreateImage can also register disk content derived from a snapshot/sandbox as a reusable image.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/usage/",
   "quote": "To detach from an interactive run or attach session while leaving the agent running, press Ctrl+\\. Reconnect with sbx --cloud attach <sandbox-name>. Reconnecting joins the existing agent session.",
   "note": "Closest thing but not a harness API: sbx CLI / SDK kits launch Claude Code, Codex, Cursor, Devin, Docker Agent, Gemini CLI, OpenCode (+Copilot, Droid, Kiro locally) inside the sandbox and you attach/detach to the agent's interactive terminal (TTY). No documented endpoint to send a prompt, stream structured agent events, send follow-ups or list/resume conversations; the API's process endpoints (CreateProcess / Interact / ReadOutput) are generic process I/O. Agents are preinstalled via kits (agent_harnesses = true).",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.docker.com/agentic-platform/policies/",
   "quote": "You can also match IPv4 and IPv6 CIDR ranges, such as 10.0.0.0/8, 192.168.1.0/24, and 2001:db8::/32.",
   "note": "Account- and sandbox-scoped network policies (presets allow-all / balanced / deny-all; hostname patterns example.com, *.example.com, **.example.com, host:port; plus CIDRs). Deny wins over allow. Enforced by Docker's proxy outside the microVM ('All outbound TCP traffic passes through a proxy ... that enforces the network access policy'). CLI: sbx --cloud policy init deny-all; --allow-network / --deny-network at creation. API NetworkPolicy has allowNetworks/denyNetworks ('exact network names or CIDRs'). Policy decision logs available (sbx --cloud policy log).",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/network-policy/",
   "quote": "Cloud rules match network destinations. HTTP method and path restrictions, --protocol, and local governance profiles aren't supported.",
   "note": "Cloud only matches destinations. LOCAL Docker Sandboxes do support HTTP method + path rules ('A local policy rule can also match the HTTP method and path of a request'), so this may come to cloud later.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/usage/",
   "quote": "Treat an exposed URL as a public endpoint. Apply authentication in the service and remove the exposure when you no longer need it.",
   "note": "Only control is choosing which ports to publish (sbx --cloud ports --publish/--unpublish; API CreatePort/DeletePort); nothing is exposed until you publish. Published URLs are public HTTPS, not protected by Docker account auth ('Docker account authentication does not protect the application URL'); no IP allowlists, tokens or private URLs; HTTP only, not a general TCP tunnel. SSH is via Docker-signed SSH certificates (IssueSSHCert), not a public port.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Each sandbox is a microVM 'with its own Linux kernel' and its own private Docker Engine; the agent 'runs as a non-root user with sudo privileges inside the VM' (security/isolation page). Docker Engine inside the VM itself programs iptables, so in-guest iptables/nftables should work. Not explicitly documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://docs.docker.com/ai/sandboxes/cloud/credentials/",
   "quote": "Sandboxes using this secret receive a placeholder in PROJECT_API_TOKEN. The cloud proxy sets Authorization: Bearer <secret> on requests to api.example.com.",
   "note": "Built-in services (anthropic, openai incl. OAuth, google, groq, mistral, nebius, xai, cursor, droid, github token) plus custom secrets for any exact DNS host (up to 10 hosts, chosen header + format, placeholder env var; wildcards and IP literals rejected). Account- or sandbox-scoped. HTTP header injection only; no database/SSH coverage documented (git over HTTPS to GitHub works via the github token). Caveat: credentials an agent writes to disk itself are captured in templates/snapshots.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes-api/cookbook/attach-persistent-storage/",
   "quote": "Keep project data after a sandbox is deleted by mounting a persistent volume. A volume is an independent resource: deleting a sandbox does not delete the volume.",
   "note": "Experimental, free, 100 volumes/account, must be enabled per account; attached only at creation. Not a live block device: 'Volume data is saved as a snapshot when a sandbox exits, not continuously.' Volume-backed sandboxes can't be stopped; memory-snapshot images don't support volumes.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.docker.com/reference/api/sandboxes/latest/schemas/AttachmentMode/",
   "quote": "exclusive: exclusive permits one sandbox to attach the volume read-write.",
   "note": "API attachment mode is exclusive only ('it never silently enables shared writers'; cookbook: 'For Cloud Sandboxes, supply one entry and use exclusive attachment'). The CLI page does say concurrent mounts are possible but each sandbox works on its own copy: 'If multiple sandboxes mount the same volume at the same time, the last sandbox to exit overwrites the stored snapshot.' So no live shared filesystem; no read-only multi-attach mode documented.",
   "checked": "2026-09-29"
  },
  "browser": {
   "value": false,
   "source": "https://www.docker.com/products/docker-sandboxes/",
   "quote": "Run Claude Code, Codex, and your other agents at full speed in MicroVM environments. Local or cloud. One CLI.",
   "note": "not offered: outside the product's scope — Docker (Cloud) Sandboxes is a MicroVM sandbox for running coding agents/CLI workloads; no managed/real browser is documented anywhere in the sandbox, API, or agent-kit docs.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.docker.com/products/docker-sandboxes/",
   "quote": "Run Claude Code, Codex, and your other agents at full speed in MicroVM environments. Local or cloud. One CLI.",
   "note": "not offered: outside the product's scope — a coding-agent MicroVM sandbox, not a browser/scraping product; no stealth or fingerprinting feature is documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.docker.com/products/docker-sandboxes/",
   "quote": "Run Claude Code, Codex, and your other agents at full speed in MicroVM environments. Local or cloud. One CLI.",
   "note": "not offered: outside the product's scope — a coding-agent MicroVM sandbox with no browser automation product; no CAPTCHA solving feature is documented.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.docker.com/ai/sandboxes/cloud/network-policy/",
   "quote": "All outbound TCP traffic passes through a proxy ... that enforces the network access policy.",
   "note": "Sandboxes run on Docker-managed cloud infrastructure and egress via Docker's own outbound proxy; nothing in the docs claims residential or mobile IPs (product is a dev/coding sandbox, not a residential-proxy service). No specific static/allowlistable IP is published, so this is Docker's ordinary datacenter egress.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes-api/cookbook/snapshot-and-fork-a-sandbox/",
   "quote": "Use an authenticated client and the resource name of a running sandbox. ... The source sandbox does not need to remain running. Restoration does not replace it.",
   "note": "CreateSnapshot checkpoints a running sandbox (a stopped source is rejected per API docs) and RestoreSnapshot forks a brand-new sandbox from it while the source is left untouched/continues running — i.e. a running machine can be cloned without stopping it.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes-api/cookbook/snapshot-and-fork-a-sandbox/",
   "quote": "Request memory only when your environment supports it and you need the running state. ... captureMode: withMemory ? 'all' : 'disk'",
   "note": "captureMode 'all' captures memory plus disk ('requires memory-capture support'); restoring that snapshot creates a new sandbox from the same point, i.e. forks carrying memory/running-process state, not just disk.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.docker.com/reference/api/sandboxes/latest/operations/updateSandbox/",
   "quote": "UpdateSandbox changes only the display label under the observed etag. Its resource name, backing identity and child addresses remain unchanged.",
   "note": "CPU/memory (Resources: cpus, memoryMib) are fixed size pairs chosen at creation (docs list supported CPU/memory pairs); the only mutation API (UpdateSandbox / PATCH) changes just the display label, with no documented way to change vCPU/RAM of a running sandbox.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/agents/docker-agent/",
   "quote": "Create a sandbox and run Docker Agent for a project directory: $ sbx run docker-agent ~/my-project ... Without extra args, the sandbox runs: docker-agent run --yolo",
   "note": "not offered: outside the product's scope — 'Docker Agent' is Docker's own coding/CLI agent (a harness like Claude Code/Codex), launched interactively inside the sandbox with no documented API to prompt/stream a browser, computer-use, or research task agent. The sandbox API's process endpoints are generic process I/O, not a task-agent API.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes/customize/author/base-images/",
   "quote": "Most variants include Git, Docker CLI, and common development tools like Node.js, Python, Go, and Java.",
   "note": "The claude-code-minimal variant is explicitly called out as lacking Node.js/Python/Go/Java, confirming the other Docker-provided base images (used by default for cloud sandboxes) include Python out of the box.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs.docker.com/ai/sandboxes/customize/author/base-images/",
   "quote": "Most variants include Git, Docker CLI, and common development tools like Node.js, Python, Go, and Java.",
   "note": "Same base-image documentation confirms Node.js is included by default (absent only from the claude-code-minimal variant).",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/network-policy/",
   "quote": "All outbound TCP traffic passes through a proxy ... that enforces the network access policy.",
   "note": "not offered: egress is via Docker's shared outbound proxy enforcing network policy; no per-sandbox or per-account fixed/static outbound IP is documented anywhere in the network-policy, architecture, or API limits pages.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://www.docker.com/trust/compliance/",
   "quote": "The current SOC 2 Type 2 audit report includes Docker Desktop, Hub, Scout, Build Cloud, Testcontainers Cloud, Docker Hardened Images (DHI), and Offload. As new products are introduced, they are evaluated for scoping and inclusion in our audits based on GA release date and the reporting cycle.",
   "note": "Docker Inc. as a company is SOC 2 Type 2 audited, but Docker (Cloud) Sandboxes — launched 2026-09-24 — is not in the published list of products currently in scope for that audit.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://www.docker.com/trust/compliance/",
   "quote": "Docker complies with leading privacy regulations like GDPR, CCPA, CPA, CTDPA, VCDPA, UCPA, and The APEC Privacy Framework.",
   "note": "not offered: Docker's compliance/trust pages list ISO 27001/27701, SOC 2, GDPR/CCPA-family privacy laws, but no HIPAA eligibility or BAA program is mentioned anywhere for Docker or specifically for the individual-account, pay-as-you-go Cloud Sandboxes product.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://docs.docker.com/security/for-admins/single-sign-on/",
   "quote": "Single sign-on (SSO) lets users access Docker by authenticating through their identity providers (IdPs). SSO can be configured for an entire company ... that has a Docker Business subscription.",
   "note": "SSO governs sign-in to Docker Hub/Desktop/account (which cloud sandboxes are billed and accessed under) and is available on the Docker Business subscription tier.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes-api/limits/",
   "quote": "Cloud Sandboxes supports these CPU and memory pairs ...",
   "note": "not offered: no region selection, region list, or EU-residency option is documented anywhere in the cloud sandbox usage, limits, network-policy, or architecture pages; the card notes regions are unpublished ([]), consistent with a single (unstated) region rather than a chooseable EU location.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/security/isolation/",
   "quote": "Every sandbox runs inside a lightweight microVM with its own Linux kernel. Unlike containers, which share the host kernel, a sandbox VM cannot access host processes, files, or resources outside its defined boundaries.",
   "note": "No page documents /dev/kvm or nested-VM support inside a sandbox; the sandbox API/CLI docs, GPU-passthrough page and CreateSandboxRequest schema never mention KVM-in-guest or emulator support. The only 'nested virtualization' text found is about running the sbx *host* CLI inside a VM/VDI ('Cloud sandboxes don't require this setup') — unrelated to the sandbox guest itself. Product is a coding-agent VM, not a virtualization platform, so absence is consistent with the product's scope; medium confidence since it's not an explicit denial.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/faq/",
   "quote": "In local sandboxes, image paste is off by default. Text paste works because the terminal sends it directly.",
   "note": "Docker (Cloud) Sandboxes are described throughout as terminal/TTY sessions you attach/detach from (sbx attach, Ctrl+\\ to detach) running CLI coding agents (Claude Code, Codex, Gemini CLI, etc.). No VNC/RDP/graphical desktop or streaming feature is documented anywhere in the sandboxes, sandboxes-api or reference API docs. Product is explicitly a coding-agent CLI/API sandbox, not a desktop-streaming product.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes-api/",
   "quote": "Create and manage cloud sandboxes from your applications.",
   "note": "No screenshot+click 'computer use' style API exists; the API's process endpoints (CreateProcess/Interact/ReadOutput) are generic terminal/process I/O, and the product has no GUI to drive. Consistent with a headless, terminal-based coding-agent sandbox.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/usage/",
   "quote": "A cloud sandbox expires after one hour by default. On expiration, the service stops sandboxes that can be resumed and deletes the rest.",
   "note": "Stopping is driven by a fixed TTL timer set at creation (default 1h, renewable up to a 24h hard cap via renewSandboxTimeout), not by detecting idleness. TimeoutOptions schema confirms 'timeout is the initial TTL' with 'on_timeout defaults to DELETE' — a deadline model, no idle-activity detector is documented.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes-api/cookbook/expose-a-port-from-a-cloud-sandbox/",
   "quote": "Reach a web application running inside a sandbox through an HTTPS URL. Publishing creates a route to the application; it does not start the application. ... This is HTTP application access, not a general-purpose TCP tunnel.",
   "note": "Only mechanism to reach a sandbox from outside is publishing a port behind a Docker-issued HTTPS URL (proxied); no dedicated/public IPv4 address is assigned to a sandbox anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/cloud/usage/",
   "quote": "1 vCPU 2 GiB micro 2 vCPU 4 GiB small 4 vCPU 8 GiB medium 8 vCPU 16 GiB large 16 vCPU 32 GiB xl",
   "note": "The five cloud sandbox sizes are CPU/RAM-only; no GPU size or GPU flag appears in the cloud rate card, the CreateSandboxRequest/Resources API schemas, or any cloud doc. The only GPU passthrough feature Docker documents (VFIO NVIDIA passthrough, 'x86_64 Linux hosts... with NVIDIA GPUs') is explicitly for LOCAL sandboxes on your own machine, not cloud.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/security/isolation/",
   "quote": "Every sandbox runs inside a lightweight microVM with its own Linux kernel.",
   "note": "Platform API schema only documents os=\"linux\" ('os is the operating system, for example \"linux\"'), and architecture is amd64/arm64 only; no Windows guest OS is offered for cloud sandboxes.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/security/isolation/",
   "quote": "Every sandbox runs inside a lightweight microVM with its own Linux kernel.",
   "note": "Same evidence as windows: cloud sandbox guests are Linux microVMs only (amd64/arm64); macOS is only referenced as a client OS for running the sbx CLI, never as a guest OS.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/",
   "quote": "Cloud sandboxes Run on Docker-managed compute without local virtualization.",
   "note": "Cloud sandboxes explicitly run only on Docker-managed infrastructure; there is no documented option to run the cloud-sandbox control plane or compute on your own infrastructure (the 'local sandbox' mode is a different product that runs on your own laptop via KVM/HVF/WHP, not a self-hosted version of the cloud service).",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://docs.docker.com/ai/sandboxes/",
   "quote": "Cloud sandboxes Run on Docker-managed compute without local virtualization.",
   "note": "No documentation of deploying cloud sandboxes into a customer's own AWS/GCP/Azure account; all cloud sandbox compute runs on Docker's own account/infrastructure ('api.sandboxes-cloud.docker.com').",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://api.github.com/repos/docker/sbx-releases/license",
   "quote": "Copyright © 2026 Docker Inc. All rights reserved. Docker and the Docker logo are trademarks of Docker Inc. registered in the U.S. and other countries.",
   "note": "The public docker/sbx-releases GitHub repo (used to distribute the sbx CLI and NVIDIA passthrough bundle) is release-artifacts only, licensed 'All rights reserved', not an open-source license; no source repository for the sandboxes daemon, cloud service, or API is published.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.docker.com/subscription-billing/plans/docker-agentic-platform/",
   "quote": "billed monthly in arrears on a personal Docker account... No recurring fee; billed monthly in arrears",
   "note": "granularity: account-only; cost: no; Docker Cloud Sandboxes bills compute per second while running, but billing is only available as a monthly invoice or account dashboard. No API endpoint is documented to query billable usage of individual sandboxes, groups of sandboxes, or costs. The Sandboxes API (CreateSandbox, CreateProcess, etc.) provides no usage or billing data endpoints.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://docs.docker.com/ai/sandboxes-api/limits/",
 "locations_quote": "Cloud Sandboxes supports these CPU and memory pairs...",
 "locations_checked": "2026-10-01"
}