{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": null,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": null,
  "nested_virt": null,
  "root": true,
  "systemd": false,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": null,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": null,
  "sso": true,
  "gpu": false,
  "arm64": null,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": null,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": null,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": false,
  "harness_api": null,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "github-copilot-cloud-sandboxes",
  "checked": "2026-09-30",
  "company": "GitHub, Inc. (GitHub Copilot cloud sandboxes, built on Azure Container Apps Sandboxes)",
  "ownership": {
   "value": "subsidiary",
   "parent": "Microsoft Corporation",
   "source": "https://en.wikipedia.org/wiki/GitHub",
   "quote": "GitHub, headquartered in San Francisco, is operated by Github, Inc., a subsidiary of Microsoft since 2018."
  },
  "stage": {
   "value": "subsidiary",
   "source": "https://en.wikipedia.org/wiki/GitHub",
   "quote": "Company type Subsidiary ... Parent Microsoft",
   "confidence": "high",
   "note": "GitHub Copilot cloud sandboxes are a feature of GitHub Copilot, a product line of GitHub, Inc., which Microsoft acquired in 2018 for $7.5B in stock and has run as a wholly-owned subsidiary ever since. No independent funding history applies; Microsoft (parent) is a public company (NASDAQ: MSFT)."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "acquisition",
   "amount_usd": 7500000000,
   "date": "2018-10",
   "leads": [
    "Microsoft"
   ],
   "status": "confirmed",
   "source": "https://en.wikipedia.org/wiki/GitHub",
   "quote": "GitHub, headquartered in San Francisco, is operated by Github, Inc., a subsidiary of Microsoft since 2018."
  },
  "investors": [
   "Microsoft"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 1000000000,
   "kind": "ARR",
   "as_of": "2022-10",
   "status": "confirmed",
   "basis": "GitHub-wide ARR (not Copilot-specific), as disclosed by Microsoft; cited via Wikipedia/TechCrunch. Copilot-specific revenue is not separately broken out by Microsoft and the cloud-sandbox feature specifically has no standalone revenue figure.",
   "source": "https://techcrunch.com/2022/10/25/microsoft-says-github-now-has-a-1b-arr-90m-active-users/",
   "quote": "Microsoft says GitHub now has a $1B ARR, 90M active users"
  },
  "employees": {
   "value": 3787,
   "source": "https://en.wikipedia.org/wiki/GitHub"
  },
  "note": "GitHub Copilot cloud sandboxes are not an independent company: they are a feature within GitHub Copilot, itself a product of GitHub, Inc., a wholly-owned Microsoft subsidiary since the 2018 acquisition (~$7.5B all-stock). There is no separate cap table, funding round, or standalone revenue figure for Copilot or for the cloud-sandboxes feature; the $1B ARR figure is for all of GitHub (2022), not Copilot or sandboxes alone. The underlying execution platform is Microsoft's Azure Container Apps Sandboxes. Cloud sandboxing entered public preview 2026-06-02 and is billed separately from Copilot AI credits."
 },
 "id": "github-copilot-cloud-sandboxes",
 "name": "GitHub Copilot cloud sandboxes",
 "url": "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
 "category": "hyperscaler",
 "isolation": "vm",
 "modes": [
  {
   "key": "on-demand",
   "label": "Cloud sandbox (copilot --cloud), per-second meters",
   "flags": [
    "beta",
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "agent_harnesses": true
   },
   "pricing": "resource",
   "vcpu_h": 0.0864,
   "ram_gib_h": 0.0108,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    2,
    2
   ],
   "ram_fixed_per_vcpu": 2,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "GitHub billing docs: Compute $0.000024 per compute second, Memory $0.000003 per GiB second (allocated, while running), Storage $0.005 per GiB-month for snapshots of stopped sessions. Built on Azure Container Apps Sandboxes, so tier shapes (1 core : 2 GB) are assumed to match ACA tiers; not published by GitHub. Basis verified 2026-09-28: \"Memory is measured based on the memory allocated to the session, not the memory actively in use.\" ; \"The compute meter tracks the time a cloud sandbox is running.\" (https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes)."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0.005,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": null,
   "evidence": [
    {
     "quote": "Cloud sandbox policies share the same configuration as Copilot cloud agent policies, extending existing security controls to cloud sandboxed execution without additional setup",
     "url": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes"
    },
    {
     "quote": "The firewall only operates within the GitHub Actions appliance environment.",
     "url": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Copilot Pro",
   "fee": 10,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "\"$10 USD per month\" (free for some users); cloud agent \"Included\". Cloud sandboxing needs a Copilot plan; org/enterprise owners must enable the Cloud Sandbox access policy (disabled by default). Sandbox meters are billed on top. Product- and SKU-level budgets can hard-stop usage."
  },
  {
   "name": "Copilot Pro+",
   "fee": 39,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "\"$39 USD per month.\"; cloud agent \"Included\". No sandbox credit; sandbox meters billed on top."
  },
  {
   "name": "Copilot Max",
   "fee": 100,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "\"$100 USD per month\"; cloud agent \"Included\". No sandbox credit; sandbox meters billed on top."
  },
  {
   "name": "Copilot Business",
   "fee": 0,
   "per_seat": 19,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "note": "$19 per granted seat/month; 1,900 AI credits/user/month cover model usage only, not sandbox meters; org must enable Cloud Sandbox access policy"
  },
  {
   "name": "Copilot Enterprise",
   "fee": 0,
   "per_seat": 39,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "note": "$39 per granted seat/month; requires GitHub Enterprise Cloud; AI credits do not cover sandbox meters"
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": null,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": false,
  "auto_stop_idle": null,
  "max_session_h": null,
  "custom_image": false,
  "docker_inside": null,
  "nested_virt": null,
  "root": true,
  "systemd": false,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "us"
  ],
  "soc2": true,
  "hipaa": null,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": null,
  "egress_http_rules": null,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": null,
  "snapshot_auto": true,
  "harness_api": null,
  "egress_allowlist_level": null,
  "guest_firewall": true,
  "secret_proxy": false,
  "isolation": "vm",
  "image_oci": false,
  "anti_bot": false,
  "captcha_solving": false,
  "snapshot_on_demand": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "ingress_rules": false,
  "egress_ip_type": "datacenter",
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Public preview since 2026-06-02; the $10/month preview entitlement ran \"through the end of July 2026\"; after that \"all usage is billed\" (free.monthly_credit 0).",
  "\"Per compute second\" is read as per vCPU-second (matches the ACA vCPU meter exactly), but the official table (re-checked 2026-10-14) only says unit \"Compute second\" = \"Time that a cloud sandbox session is running\"; if it is per session rather than per vCPU, a 4-vCPU sandbox would cost 4x less on compute. Equal meters are not evidence of an ACA implementation. GitHub does not publish sandbox vCPU/RAM tiers, max session length, egress price, or regions.",
  "Storage $0.005/GiB-month applies to snapshots from the time a sandbox is stopped until it is deleted; this is 40x cheaper than the Premium Blob ZRS rate ACA Sandboxes will charge directly.",
  "Usable only through Copilot: interactive Copilot CLI sessions ('copilot --cloud --experimental'; cloud sandboxing is an experimental CLI feature, no -p/-i programmatic use) or the GitHub Copilot app (cloud sandbox execution location); also used by Copilot in Microsoft Teams. Org/enterprise owners must enable the 'Cloud Sandbox access' policy (disabled by default). Usage is blocked once quota is used if no payment method is on file.",
  "Sandbox meters are separate from Copilot AI credits: a cloud sandbox session also consumes the seat's AI credits for model calls, which this card does not price.",
  "Copilot Student is free and includes the cloud agent (\"Free\"; cloud agent \"Included\", https://docs.github.com/en/copilot/get-started/plans), but it is limited to verified students and the plans page does not say cloud sandboxes are available on it, so it is not listed as a plan here. Copilot Free does not include the cloud agent.",
  "No egress control is documented for cloud sandboxes: the Copilot firewall \"only operates within the GitHub Actions appliance environment\", and cloud sandboxes run on Azure Container Apps Sandboxes."
 ],
 "sources": [
  "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
  "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
  "https://github.blog/changelog/2026-06-02-cloud-and-local-sandboxes-for-github-copilot-now-in-public-preview/",
  "https://docs.github.com/en/copilot/get-started/plans",
  "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": "Paid Copilot plan and eligible repository; budgets/payment method govern extra usage.",
  "tiers": null,
  "notes": "Cloud agent runs managed sessions, not arbitrary rentable VMs. No separate numeric new-account cloud-agent fleet cap verified. Local Copilot CLI subagent concurrency is not this product. GitHub Actions budgets may constrain usage independently.",
  "sources": [
   "https://docs.github.com/en/copilot/concepts/agents/cloud-agent/agent-management"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 4,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "When you stop a session, the cloud sandbox creates a snapshot of its state so you can pick up where you left off later. When you delete a session, both the running environment and the snapshot are removed.",
   "note": "Cloud sandbox (copilot --cloud / Copilot app / SDK cloud sessions, built on Azure Container Apps Sandboxes). Triggered on session stop. The docs say resume restores 'your files, environment variables, and in-progress work', but do not say whether memory or running processes are included. Snapshot storage is billed at $0.005/GiB-month. Whether idle sessions auto-stop is not documented. The Actions-based Copilot cloud agent environment is ephemeral and has no auto snapshot.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": null,
   "was": true,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/cloud-sessions",
   "quote": "The name is an internal routing slug for the cloud agent and does not mean the session uses the local Windows sandbox.",
   "note": "SDK cloud sessions require 'Copilot access with cloud-agent entitlement' and 'appear in the agents panel on GitHub'; the page never says they run in the ACA cloud sandbox rather than the Actions-based cloud agent. The cloud sandbox page says 'Cloud sandboxing is only available for interactive Copilot CLI sessions.' and 'You can't run the CLI programmatically in a cloud sandbox'. A programmatic harness API for this product is unproven.",
   "confidence": "medium",
   "checked": "2026-10-14"
  },
  "egress_allowlist": {
   "value": null,
   "was": true,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall",
   "quote": "The firewall only operates within the GitHub Actions appliance environment.",
   "note": "The Copilot firewall page says it 'only operates within the GitHub Actions appliance environment' and 'does not apply to processes running outside of this environment'. Cloud sandboxes run on Azure Container Apps Sandboxes, not Actions, and the cloud sandbox page documents network controls only for local sandboxing. The only link is 'Cloud sandbox policies share the same configuration as Copilot cloud agent policies', which does not say egress rules are enforced in the cloud sandbox. Unknown, not proven.",
   "checked": "2026-10-14"
  },
  "egress_http_rules": {
   "value": null,
   "was": true,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall",
   "quote": "The firewall only operates within the GitHub Actions appliance environment.",
   "note": "Scheme/path-prefix URL rules exist for the Actions-based cloud agent firewall only. The Copilot firewall page says it 'only operates within the GitHub Actions appliance environment' and 'does not apply to processes running outside of this environment'. Cloud sandboxes run on Azure Container Apps Sandboxes, not Actions, and the cloud sandbox page documents network controls only for local sandboxing. The only link is 'Cloud sandbox policies share the same configuration as Copilot cloud agent policies', which does not say egress rules are enforced in the cloud sandbox. Unknown, not proven.",
   "checked": "2026-10-14"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Copilot cloud agent runs on GitHub Actions runner VMs (full VM, passwordless sudo on hosted Ubuntu runners), so iptables/nft should work. Unknown for cloud sandboxes (ACA Sandboxes).",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/configure-secrets-and-variables",
   "quote": "Variables and secrets that you configure are exposed to Copilot as environment variables, except secrets and variables prefixed with `COPILOT_MCP_`, which are only available to MCP servers.",
   "note": "Agents secrets and variables (org/repo) are injected as env vars and masked in logs. No credential-injecting proxy. The model API is platform-side (Copilot), so there are no model keys in the sandbox.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "vm",
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/sandboxes-snapshots-state-management",
   "quote": "Azure Container Apps Sandboxes are isolated, lightweight virtual machines for interactive sessions, agentic workloads, and controlled code execution.",
   "note": "GitHub: 'Cloud sandboxing is built on Azure Container Apps Sandboxes'. Microsoft calls these isolated lightweight VMs and says 'Each sandbox runs in its own secure boundary' (learn.microsoft.com/en-us/azure/container-apps/sandboxes-overview), but no public page names the hypervisor, so Firecracker was dropped for plain vm (matches the azure-container-apps-sandboxes card).",
   "checked": "2026-10-14",
   "was": "firecracker"
  },
  "image_oci": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire GitHub Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "GitHub's cloud sandbox docs describe only starting, stopping, resuming, and deleting a session; no user-facing option to supply a custom Docker/OCI image is documented for the Copilot product, even though the underlying Azure Container Apps Sandboxes platform supports custom OCI disk images. Consistent with the card's existing custom_image:false.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud and local sandboxes provide isolated execution environments that let GitHub Copilot safely interact with code, tools, filesystem, and network resources securely on your local machine or in fully isolated cloud environments.",
   "note": "not offered: outside the product's scope — this is a coding-agent execution sandbox, not a browser/scraping product; no stealth or fingerprinting-evasion feature is documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud and local sandboxes provide isolated execution environments that let GitHub Copilot safely interact with code, tools, filesystem, and network resources securely on your local machine or in fully isolated cloud environments.",
   "note": "not offered: outside the product's scope — a coding-agent sandbox for running Copilot CLI/app sessions, not a browser-automation or scraping product; no CAPTCHA-solving capability is documented.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "When you stop a session, the cloud sandbox creates a snapshot of its state so you can pick up where you left off later.",
   "note": "Snapshotting is described only as an automatic side effect of stopping a session (Active → Stopped), not as a separate on-demand checkpoint API/CLI call a user can invoke while the session keeps running.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Stopped: The session is not currently running, but its state is saved. When you resume it, your files, environment variables, and in-progress work are restored.",
   "note": "Resuming a stopped session is described as an explicit user action ('when you resume it'), not an automatic wake triggered by an inbound request; the product has no exposed inbound URL for arbitrary requests anyway.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing is built on Azure Container Apps Sandboxes, with GitHub providing the identity, policy, and billing layer.",
   "note": "not offered: outside the product's scope as exposed to Copilot users — no attach-a-volume feature is documented for Copilot cloud sandbox sessions, even though the underlying Azure Container Apps Sandboxes platform supports Blob/Data Disk volumes. Consistent with the card's existing volumes:false.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing is built on Azure Container Apps Sandboxes, with GitHub providing the identity, policy, and billing layer.",
   "note": "not offered: outside the product's scope as exposed to Copilot users — no shared-volume feature across Copilot cloud sandbox sessions is documented. Consistent with the card's existing volumes:false.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/cloud-sessions",
   "quote": "Cloud sessions run Copilot work on GitHub-hosted compute and appear in the agents panel on GitHub. Use them when your app should create a session that executes remotely instead of starting a local GitHub Copilot CLI session on the user's machine or your server.",
   "note": "not offered: outside the product's scope — GitHub's first-party API (Copilot SDK cloud sessions / REST agent tasks) drives Copilot's own CODING harness (already captured by harness_api:true), not a separate browser/computer-use/research task agent.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": null,
   "source": "https://docs.github.com/en/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-with-mcp",
   "quote": "Using Copilot cloud agent via the GitHub MCP Server ... Start Copilot cloud agent sessions from any IDE or agentic tool that supports Model Context Protocol (MCP).",
   "note": "The GitHub MCP Server starts Copilot cloud agent sessions (Actions-based), a different product from the ACA-based cloud sandbox. The cloud sandbox page says 'Cloud sandboxing is only available for interactive Copilot CLI sessions.' No MCP route into a cloud sandbox is documented.",
   "checked": "2026-10-14",
   "was": true
  },
  "inbound_https": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/cloud-sessions",
   "quote": "Cloud sessions run Copilot work on GitHub-hosted compute and appear in the agents panel on GitHub.",
   "note": "not offered: outside the product's scope — a Copilot cloud sandbox session is reached only through the Copilot CLI, GitHub Copilot app, or the agents panel URL; there is no documented feature to expose an arbitrary port on the sandbox as a public HTTPS URL.",
   "checked": "2026-09-30"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/cloud-sessions",
   "quote": "Cloud sessions run Copilot work on GitHub-hosted compute and appear in the agents panel on GitHub.",
   "note": "not offered: outside the product's scope — since no inbound HTTPS/port exposure feature exists for Copilot cloud sandbox sessions, there is correspondingly no documented provider-side ingress control (IP allowlists, auth URLs) for them.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Stopped: The session is not currently running, but its state is saved. When you resume it, your files, environment variables, and in-progress work are restored. ... When you stop a session, the cloud sandbox creates a snapshot of its state so you can pick up where you left off later.",
   "note": "Card contradiction confirmed: stopping a cloud sandbox snapshots the filesystem (billed as snapshot storage, $0.005/GiB-month) and resuming restores files. That is a first-party persist-across-stop mechanism, so persistent_disk should be true (default: snapshot on stop, restored on resume; deleting the session removes the snapshot permanently).",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "A cloud sandbox session has three main states: Active ... Stopped ... Deleted: The session and its saved state are removed and cannot be recovered.",
   "note": "Only active/stopped/deleted lifecycle is documented; no API or CLI/app action to duplicate a session into a second independent sandbox was found in the sandboxing, SDK cloud-sessions, or session-persistence docs.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "A cloud sandbox session has three main states: Active ... Stopped ... Deleted: The session and its saved state are removed and cannot be recovered.",
   "note": "No documented way to branch a live/running session into a second running copy; same evidence as fork.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "When you stop a session, the cloud sandbox creates a snapshot of its state so you can pick up where you left off later.",
   "note": "The snapshot on stop is used only to resume the same session later, not documented as a mechanism to spawn a new/forked sandbox from that snapshot.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": null,
   "was": false,
   "note": "doubtful \"no\" could not be confirmed: Docs describe the sandbox as a container-based Linux environment for running Copilot CLI/app sessions; whether the container permits running Docker/nested containers is not documented either way. No 'docker' mention anywhere on the sandboxing, billing, or SDK cloud-session pages checked.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": null,
   "was": false,
   "note": "doubtful \"no\" could not be confirmed: No mention of nested virtualization/hardware-VM support inside the sandbox container in any page checked; ACA Sandboxes are container-based, so nested VMs are plausible but unconfirmed.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Sandboxing uses your existing Copilot authentication. If you can sign in to Copilot CLI or the GitHub Copilot app and have access to Copilot, you don't need to configure separate authentication for the sandboxing options available in that surface.",
   "note": "Access to a cloud sandbox session is only through Copilot CLI (copilot --cloud) or the GitHub Copilot app; no SSH endpoint or key-based shell access to the sandbox is documented anywhere in the sandboxing or billing pages.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "The product is a headless CLI/agent coding environment (shell + files), not a GUI desktop; no desktop/VNC/RDP access is documented.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "No embedded/controllable browser inside the sandbox is documented; the sandbox exposes a CLI/agent shell, not a browser UI.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "The commands that Copilot runs execute in the cloud environment, not on your local machine.",
   "note": "Copilot cloud sandbox is a shell/file coding agent (runs commands, edits files), not a GUI computer-use/screen-control agent; no computer_use capability is documented.",
   "checked": "2026-09-30"
  },
  "custom_image": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire GitHub Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "Re-checked 2026-10-14: the cloud sandbox page documents no image, base-image or environment choice. 'Customize the agent environment' applies to the separate Actions-based cloud agent. The underlying ACA Sandboxes platform supports custom OCI disk images, but GitHub does not expose that.",
   "checked": "2026-10-14"
  },
  "volumes": {
   "value": false,
   "source": "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
   "quote": "Storage Snapshot storage for stopped sessions. GiB month $0.005",
   "note": "Storage documented is only the automatic per-session state snapshot, not a separately attachable/mountable persistent volume; no volume_attach/volume_shared capability is documented.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandbox policies share the same configuration as Copilot cloud agent policies, extending existing security controls to cloud sandboxed execution without additional setup.",
   "note": "No dedicated/public inbound IPv4 address for a cloud sandbox is documented; network docs describe only outbound firewall/allowlist controls, not inbound public IP assignment.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
   "quote": "GitHub measures cloud sandbox usage across three meters: Compute, Memory, Storage.",
   "note": "Only CPU compute-second, memory GiB-second, and storage GiB-month meters are billed/documented; no GPU meter, GPU type, or GPU option exists for this coding-agent sandbox.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "Cloud sandbox is explicitly Linux-only. (Windows is only a supported OS for local sandboxing on the user's own machine, a different feature.)",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub.",
   "note": "Cloud sandbox is explicitly Linux-only. (macOS is only a supported OS for local sandboxing on the user's own machine, a different feature.)",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": null,
   "was": false,
   "note": "doubtful \"no\" could not be confirmed: GitHub does not publish the CPU architecture of cloud sandbox sessions (built on Azure Container Apps Sandboxes) anywhere checked; no confirmation of x86-only or ARM availability.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing: Run an entire Copilot session remotely, inside a fully isolated, ephemeral Linux environment hosted by GitHub. ... Because cloud sandbox sessions run in GitHub-hosted infrastructure, you can pick up a Copilot session on any device.",
   "note": "Cloud sandboxes run only on GitHub-hosted infrastructure; there is no option to run the cloud sandbox on your own servers (self-hosting is only offered for GitHub Actions-based cloud agent runners, a different product).",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "You don't need to configure a separate cloud provider, manage API keys, or set up infrastructure.",
   "note": "Explicitly no bring-your-own-cloud option: GitHub owns the infrastructure (Azure Container Apps Sandboxes) end to end.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes",
   "quote": "Cloud sandboxing is built on Azure Container Apps Sandboxes, with GitHub providing the identity, policy, and billing layer.",
   "note": "Cloud sandboxing is a proprietary GitHub/Azure-hosted service; no open-source repository for the cloud sandbox runtime itself is published (Copilot CLI and the MXC local-sandbox backend are separate open components, but the cloud sandbox service is not).",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://docs.github.com/en/enterprise-cloud@latest/admin/data-residency/github-copilot-with-data-residency",
   "quote": "If your enterprise uses GitHub Enterprise Cloud with data residency, you can enable a policy to ensure that all inference processing and associated data for GitHub Copilot remain within your designated geographic region. Copilot with data residency is currently available in the following regions: United States, European Union.",
   "note": "derived: GitHub's only documented EU-region control for Copilot is 'Copilot with data residency', which keeps AI *model inference* traffic/logs in-region (US or EU) for GHEC customers; it does not mention the cloud sandbox execution environment at all. The Copilot cloud-sandbox docs/billing docs list only a 'us' region for sandboxes and do not offer any EU/region selection for where the sandbox VM itself runs.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses",
   "quote": "GitHub-hosted runners use dynamically assigned IP addresses from shared infrastructure. These IP addresses are published via the Meta API (for example, the actions and actions_macos keys).",
   "note": "The Meta API (api.github.com/meta) publishes a 'copilot' key with a shared, published list of Azure/GitHub datacenter CIDR ranges (e.g. 20.85.130.105/32, 4.237.22.41/32, 192.30.252.0/22) analogous to the actions/actions_macos runner-IP keys described on this page; this is a shared pool of dynamically assigned datacenter IPs, not residential/mobile and not a single dedicated IP, so classified as datacenter (medium confidence: the copilot key isn't narrated in prose as covering cloud-sandbox egress specifically).",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://learn.microsoft.com/en-us/azure/container-apps/sandboxes-overview",
   "quote": "Resource tiers: Each sandbox is assigned a resource tier that checks its CPU, memory, and disk allocation. Tier CPU Memory Disk XS 0.25 cores 0.5 GB 20 GB S 0.5 cores 1 GB 20 GB M (default) 1 core 2 GB 20 GB L 2 cores 4 GB 40 GB XL 4 cores 8 GB 80 GB",
   "note": "derived: the underlying Azure Container Apps Sandboxes platform assigns a fixed resource tier at creation; its documented lifecycle operations are create/suspend(stop)/resume/delete only, with no resize/scale operation on a running sandbox. GitHub's own Copilot cloud-sandbox docs likewise describe only Active/Stopped/Deleted states with no resize control exposed.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall",
   "quote": "By default, allows access to: ... Packages registries used by popular programming languages (C#, Dart, Go, Haskell, Java, JavaScript, Perl, PHP, Python, Ruby, Rust, Swift).",
   "note": "This firewall default allowlist (which the docs say 'Cloud sandbox policies share the same configuration as Copilot cloud agent policies') explicitly includes Python package registries, implying Python tooling is an expected, supported workload in the sandboxed Linux environment. No explicit 'Python is preinstalled' statement was found, so medium confidence.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall",
   "quote": "By default, allows access to: ... Packages registries used by popular programming languages (C#, Dart, Go, Haskell, Java, JavaScript, Perl, PHP, Python, Ruby, Rust, Swift).",
   "note": "Same shared firewall allowlist includes JavaScript/npm registries. Additionally, GitHub Copilot CLI itself (the interface used to drive `copilot --cloud` sessions) is an npm-distributed Node.js CLI, so a Node.js runtime is present in the sandbox that runs it; medium confidence since GitHub does not explicitly document 'Node.js is available to your code' as a sandbox feature.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses",
   "quote": "We make changes to our IP addresses from time to time. We do not recommend allowing by IP address, but if you use these IP ranges we strongly encourage regular monitoring of our API.",
   "note": "Outbound traffic uses GitHub's shared, published, and changeable IP ranges (the 'copilot' key in api.github.com/meta lists ~17 CIDR/host ranges shared across all customers), not a single fixed IP dedicated to one account or session; no static/dedicated egress IP feature is documented for Copilot cloud sandboxes.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
   "quote": "Usage is billed to your account based on the resources consumed by your cloud sandbox sessions. The meters are: Compute (per compute second), Memory (per GiB second), Storage (per GiB-month for snapshots).",
   "note": "granularity: account-only; cost: yes; GitHub documents the billing meters and that 'Product- and SKU-level budgets can hard-stop usage', but provides no REST API, SDK method, or CLI command to retrieve per-sandbox or per-tag usage data. Cloud sandbox sessions are created and managed through the Copilot SDK (createSession, resumeSession) but no usage/billing query methods are documented in the SDK. The billing page describes only account-level cost and quota enforcement, not per-resource usage reporting.",
   "confidence": "medium",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://docs.github.com/en/billing/concepts/product-billing/cloud-and-local-sandboxes",
 "locations_quote": "GitHub does not publish sandbox vCPU/RAM tiers, max session length, egress price, or regions.",
 "locations_checked": "2026-10-01"
}