{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": null,
  "sso": null,
  "gpu": true,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": null,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": true,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "hud",
  "checked": "2026-09-30",
  "company": "HUD",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/hud",
   "quote": "Founded in 2025 by Lorenss Martinsons, Parth Patel, and Jay Ram, HUD has 15 employees based in San Francisco."
  },
  "stage": {
   "value": "seed",
   "source": "https://www.ycombinator.com/companies/hud",
   "quote": "Founded in 2025 by Lorenss Martinsons, Parth Patel, and Jay Ram, HUD has 15 employees based in San Francisco.",
   "confidence": "low",
   "note": "No priced round (amount, date, investors) could be confirmed from any public source in the time available. Stage inferred only from YC W25 participation (YC itself is a pre-seed/accelerator investment); actual last priced round is unknown. Treat 'seed' as a low-confidence placeholder, not a confirmed stage."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Winter 2025",
    "source": "https://www.ycombinator.com/companies/hud",
    "quote": "\"batch\":\"W25\",\"batch_name\":\"Winter 2025\" ... \"ycdc_status\":\"Active\"",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 15,
   "source": "https://www.ycombinator.com/companies/hud"
  },
  "note": "YC hint confirmed: the YC directory company 'HUD' (Winter 2025 batch, Active status) lists website https://www.hud.ai, matching the provider card's URL (https://www.hud.ai/). Founders: Lorenss Martinsons, Parth Patel, Jay Ram; 15 employees in San Francisco as of the YC page snapshot. Could not confirm any priced funding round, total funding amount, investors, or revenue/ARR from public sources within the research window — general web search engines (DuckDuckGo, Bing, Google) returned bot-challenge pages or irrelevant localized results rather than usable search results during this session, and HUD's own site/blog/press pages did not mention funding figures. A buyer should treat funding/revenue fields here as unresearched rather than confirmed-absent."
 },
 "id": "hud",
 "name": "HUD",
 "url": "https://www.hud.ai/",
 "category": "agent-sandbox",
 "isolation": "vm",
 "modes": [
  {
   "key": "native",
   "label": "Native service",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "Micro (t3.small)",
     "vcpu": 2,
     "ram_gib": 2,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    },
    {
     "name": "Small (t3.medium)",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    },
    {
     "name": "Default (t3.large)",
     "vcpu": 2,
     "ram_gib": 8,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    },
    {
     "name": "Large (t3.xlarge)",
     "vcpu": 4,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    },
    {
     "name": "Extra Large (t3.2xlarge)",
     "vcpu": 8,
     "ram_gib": 32,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "EC2 fixed profiles (t3 burstable family; CPU baseline not published by HUD). $0.10/environment-hour is the public headline rate; per-profile rates are only shown in the logged-in Project billing page. Large/Extra Large need team access."
  },
  {
   "key": "modal-hosted",
   "label": "HUD-hosted on Modal (CPU/GPU profiles)",
   "flags": [
    "alt"
   ],
   "pricing": "sizes",
   "gpu_only": false,
   "sizes": [
    {
     "name": "cpu=1;memory_mb=8192",
     "vcpu": 1,
     "ram_gib": 8,
     "hour": null
    },
    {
     "name": "cpu=2;memory_mb=8192",
     "vcpu": 2,
     "ram_gib": 8,
     "hour": null
    },
    {
     "name": "cpu=4;memory_mb=8192",
     "vcpu": 4,
     "ram_gib": 8,
     "hour": null
    },
    {
     "name": "cpu=16;memory_mb=16384",
     "vcpu": 16,
     "ram_gib": 16,
     "hour": null
    },
    {
     "name": "cpu=8;memory_mb=32768;gpu=L4:1",
     "vcpu": 8,
     "ram_gib": 32,
     "hour": null
    },
    {
     "name": "cpu=8;memory_mb=32768;gpu=H100!:1",
     "vcpu": 8,
     "ram_gib": 32,
     "hour": null
    },
    {
     "name": "cpu=8;memory_mb=32768;gpu=B200!:1",
     "vcpu": 8,
     "ram_gib": 32,
     "hour": null
    },
    {
     "name": "cpu=8;memory_mb=32768;gpu=H100:8",
     "vcpu": 8,
     "ram_gib": 32,
     "hour": null
    }
   ],
   "note": "Exact-match billing profiles; unmatched requests rejected. Per-profile rates only in logged-in Project billing. Compose deployments always use Modal."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Cloud (pay as you go)",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "$0.10/environment-hour headline rate; '100+ parallel environment instances' (a floor, not a cap); prepaid credit balance with optional automatic top-ups; SDK + platform access free."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": 24,
   "note": "Custom/volume pricing; training on your environments; 24-hour environment runtime; SOC 2; dedicated support."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": 10,
  "note": "$10 one-time Cloud credit, no credit card required; students/researchers with a .edu email can apply for a $100 credit grant."
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": true,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": null,
  "sso": null,
  "gpu_types": [
   "L4",
   "H100",
   "B200"
  ],
  "regions": null,
  "lang_python": true,
  "lang_node": null,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": true,
  "harness_api": true,
  "egress_allowlist_level": "domain",
  "ingress_rules": true,
  "secret_proxy": "ai-only",
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "guest_firewall": false,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Official website pricing: SDK/platform free; Cloud $0.10/environment-hour, 100+ parallel instances, $10 free credits. Enterprise custom adds 24h runtime and training; academic grant $100 conditional. CPU/RAM allocation unspecified, so environment-hour not a 4/8 VM guarantee.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "Docs name Free / Pro / Scale / Enterprise subscription tiers (team storage caps 10 GiB / 50 GiB / 200 GiB / unlimited); Pro and Scale fees are not public (hud.ai/pricing redirects to sign-in)."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/hud",
  "https://www.hud.ai/",
  "https://docs.hud.ai/platform/environments.md",
  "https://docs.hud.ai/platform/team.md",
  "https://docs.hud.ai/llms-full.txt",
  "https://docs.hud.ai/v6/reference/runtime.md"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": "Cloud starter credits advertised without card.",
  "tiers": "Cloud advertises 100+ parallel environment instances; Large/Extra Large EC2 profiles gated behind team access; Enterprise custom.",
  "notes": "100+ is a product/plan capability claim, not an explicit fresh-trial account allowance, so default remains null. 300/1,000 and numeric GPU/vCPU account quotas need provider confirmation. Browser-rendered official homepage examined.",
  "sources": [
   "https://www.hud.ai/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 14,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 12
 },
 "feature_evidence": {
  "harness_api": {
   "value": true,
   "source": "https://docs.hud.ai/v6/reference/agents.md",
   "quote": "`ClaudeSDKAgent` runs the `claude`\nCLI over an `ssh` capability, against the env's filesystem.",
   "note": "The SDK (Task.run/Taskset.run, `hud eval`) drives Claude Code inside the environment over SSH from outside, parsing its JSONL event stream into the HUD trace; multi-turn via the Chat class. GitHub main (docs/v6/guides/running-an-eval.mdx) renames it ClaudeCLIAgent and adds CodexCLIAgent: 'The `claude_cli` and `codex_cli` harnesses instead run an installed CLI inside the environment; pass `--gateway` to route their model calls through HUD.' Code docstring: 'ClaudeCLIAgent — runs ``claude`` CLI over SSH inside the env workspace.' Harnesses: Claude Code (live docs), Codex CLI (GitHub main, not yet on docs.hud.ai). The built-in ClaudeAgent/OpenAIAgent/GeminiAgent loops run outside the env and only call tools in it. HostedRuntime runs the whole rollout remotely but only for gateway agents (not the CLI harnesses).",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.hud.ai/v6/reference/capabilities.md",
   "quote": "| `network` | `bool` | Allow network inside the sandbox. Default `False`. |",
   "note": "Enforced by HUD's SDK Workspace (a 'bwrap-isolated SSH exec server' inside the environment image), not by a cloud firewall: the agent's workspace gets its own network namespace, no network by default. Host allowlists: Harbor adapter docs list 'network modes, allowlists' (modes public / no-network / allowlist) and verifier environments have their own 'network mode, allowlist'. GitHub code: Workspace(allowed_hosts=...) routes egress through a proxy outside the namespace that 'sees every connection and applies the task's declared policy' (hostname match, '*' = any). allowed_hosts is not in the docs.hud.ai Workspace table. The environment/grader process itself (outside the workspace) has no documented egress control on HUD-hosted EC2/Modal.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.hud.ai/v6/internals/control-channel.md",
   "quote": "All external capability\ntraffic therefore follows the control address even when a manifest binding\ncontains a substrate-local or otherwise unreachable address.",
   "note": "A served environment exposes one control-channel TCP address; only capabilities the environment declares (ssh, mcp, cdp, rfb, robot) are reachable, as tunnels over it. For hosted envs, 'The SDK leases your deployed env by name and tunnels to its control channel' (HUDRuntime, HUD_API_KEY auth). No public preview URLs, custom port exposure or IP allowlists documented.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": "ai-only",
   "source": "https://github.com/hud-evals/hud-python/blob/main/hud/agents/claude/sdk/agent.py",
   "quote": "# The relay injects the scoped credential; the process never sees it.",
   "note": "Model keys only: in-env CLI harnesses (Claude Code, Codex) get a placeholder credential ('hud-process-bound') and a per-process relay URL; the relay adds the real Authorization header (hud/capabilities/connection.py: 'The process receives :attr:`client_url` instead and never receives the header values'). The Connection class accepts any HTTP(S) URL + headers, but it is only an undocumented rollout(connections=...) parameter, not a registrable secret store; docs.hud.ai does not describe it. Without a connection, the CLI agent's env gets the real HUD_API_KEY / ANTHROPIC_API_KEY. BYOK provider keys stay in the HUD inference gateway (team docs: 'Do not put a provider key in personal secrets when the inference gateway should own and meter the provider call. Use **BYOK** for that path.'). Other secrets (environment variables, personal/member secrets) are injected into the sandbox as env vars ('Personal secrets | One membership, injected into every rollout sandbox it launches'). No non-HTTP coverage.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://docs.hud.ai/platform/rest-api.md",
   "quote": "An environment is the sandboxed application an agent works in, packaged as a container image that HUD hosts.",
   "note": "HUD's own machine is a Docker/OCI image; hosted rollouts place that container on an AWS EC2 t3 instance (--runtime hud) or inside a Modal sandbox (--runtime modal), and the in-container agent shell is additionally bwrap-namespaced. No firecracker/qemu/full-VM boundary is documented for HUD's own runtime; 'container' is the best single label across its hosted placements.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "`image` | Image to run.",
   "note": "Environments are built from a Dockerfile (Dockerfile.hud) and deployed as container images (hud deploy); RuntimeConfig.image / ModalRuntime(image=...) also accept arbitrary Docker/registry images, including private ones via registry_secret.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.hud.ai/",
   "quote": "Environments are the sandboxed application an agent works in, packaged as a container image the platform hosts.",
   "note": "not offered: outside the product's scope — HUD environments are Docker containers (optionally bwrap-namespaced for the SSH workspace); no /dev/kvm or nested-VM capability is documented for the hosted runtimes.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.hud.ai/",
   "quote": "HUD is an agent evaluation and environment platform for running models against tasks and grading the results.",
   "note": "not offered: outside the product's scope — HUD provides eval/training sandboxes (browser via CDP, VNC desktop) for grading agents, not a stealth/anti-fingerprinting browsing product.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.hud.ai/",
   "quote": "HUD is an agent evaluation and environment platform for running models against tasks and grading the results.",
   "note": "not offered: outside the product's scope — no CAPTCHA-solving capability is documented anywhere in HUD's SDK/platform docs.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.hud.ai/platform/environments.md",
   "quote": "HUD supports EC2 and Modal for hosted environment runs.",
   "note": "Hosted environments run on AWS EC2 (t3 family) or Modal's cloud, both ordinary cloud/datacenter egress; no residential/mobile/static-IP product is documented.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": true,
   "source": "https://docs.hud.ai/v6/reference/capabilities.md",
   "quote": "| `ssh` | `ssh/2` | Shell commands and file operations in a sandboxed workspace | `Workspace` (built in) |",
   "note": "Built-in Workspace capability publishes an ssh/2 endpoint (host_pubkey, client_key) that CLI harnesses (e.g. Claude Code) and users connect to for shell access.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://docs.hud.ai/platform/file-tracking.md",
   "quote": "**Snapshot** | The post-setup path and content-hash baseline.",
   "note": "HUD's only 'snapshot' concept is a file-tracking content-hash baseline used to diff agent edits during a trace, not a restorable machine disk/memory snapshot. Rollouts are ephemeral containers/instances; no machine-state snapshot/restore API is documented.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://docs.hud.ai/platform/file-tracking.md",
   "quote": "**Snapshot** | The post-setup path and content-hash baseline.",
   "note": "No automatic machine-state save-on-stop/restore-on-start is documented; consistent with snapshot=none.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "Daytona ... rejects `run_timeout_s` and resource overrides when booting from an already-built snapshot.",
   "note": "The only on-demand 'snapshot' primitive documented for HUD-run environments is DaytonaRuntime's build-time image snapshot (a container image cache), not an API to checkpoint a running machine's disk/memory on demand.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://docs.hud.ai/llms-full.txt",
   "quote": "hud models fork Qwen/Qwen3.5-4B --name arith-rl",
   "note": "'fork' in HUD's docs refers only to forking a trainable model (RL) or a GitHub repo, not cloning a running sandbox machine; no machine-fork API is documented.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.hud.ai/llms-full.txt",
   "quote": "hud models fork Qwen/Qwen3.5-4B --name arith-rl",
   "note": "No running-machine clone capability documented; 'fork' only applies to trainable models.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://docs.hud.ai/llms-full.txt",
   "quote": "hud models fork Qwen/Qwen3.5-4B --name arith-rl",
   "note": "No memory-preserving machine clone is documented; only model weight forking exists.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://docs.hud.ai/v6/internals/control-channel.md",
   "quote": "An optional `session_id` resumes a parked session instead of minting a fresh one.",
   "note": "The 'parked session'/'resume' concept reconnects a control-channel session (short reconnect window), not a stop/pause-billing then resume-machine feature; no such API is documented.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://docs.hud.ai/platform/environments.md",
   "quote": "HUD creates a job containing one or more traces and opens the job page as soon as the batch is queued.",
   "note": "Rollouts are explicitly launched per task/run; no sleeping-machine-wakes-on-inbound-request behavior is documented.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "`DockerRuntime(image=...)` | A fresh local container per rollout",
   "note": "Every runtime (Docker, Modal, HUD-hosted EC2) starts a fresh container/sandbox per rollout from the built image; no documented mechanism keeps a machine's disk state across stop/start outside that image baseline.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "`resources` | Placement requests: CPU, memory, disk, acceptable GPU types and count, OS, or TPU slice.",
   "note": "RuntimeConfig only requests ephemeral `storage_mb` sizing for the rollout container; no attachable/persistent extra-volume primitive is documented.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "`Shared(provider, width=N)` | One substrate from `provider`, shared by up to N concurrent connections",
   "note": "`Shared` lets several agent connections share one running environment's compute (e.g. a GPU sim), but this is connection sharing, not a persistent volume mounted by multiple machines; no shared-volume feature is documented.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "`run_timeout_s` bounds the lifetime of the provisioned environment, not the complete rollout.",
   "note": "Environments are bounded by explicit run/startup timeouts set per task, not an idle-detection auto-stop policy; no idle-based stop/sleep is documented.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "Resources (cpu/memory/gpu) are fixed on the snapshot at build time ... without `image`, an already-built snapshot cannot be resized.",
   "note": "CPU/RAM/GPU are fixed per build/profile (EC2 tier, Modal exact-match profile, or Daytona snapshot); changing them requires a new build/profile, not a live resize of a running machine.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/agents.md",
   "quote": "`ClaudeSDKAgent` runs the `claude` CLI over an `ssh` capability, against the env's filesystem.",
   "note": "not offered: outside the product's scope — HUD's Agent classes (ClaudeAgent, OpenAIAgent, GeminiAgent, ClaudeSDKAgent, ToolAgent) are thin wrappers that drive third-party models/CLIs (your harness or a model provider) inside the environment; HUD does not ship its own first-party browser/computer-use/research agent product to drive.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://github.com/hud-evals/hud-python",
   "quote": "git clone https://github.com/hud-evals/hud-python.git",
   "note": "The HUD SDK and CLI (hud-python) are themselves Python; environments are authored and served with Python (env.py, @env.initialize/@env.template), and sandboxes routinely run Python task/grading code.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.hud.ai/v6/internals/control-channel.md",
   "quote": "All external capability traffic therefore follows the control address even when a manifest binding contains a substrate-local or otherwise unreachable address.",
   "note": "A served environment exposes exactly one control-channel address that the HUD client tunnels through (HUDRuntime leases by name and tunnels); there is no documented per-machine public IPv4 assignment.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://docs.hud.ai/v6/internals/control-channel.md",
   "quote": "The SDK leases your deployed env by name and tunnels to its control channel",
   "note": "Access to a running environment's capabilities (ssh/mcp/cdp/rfb) is via HUD's own tunneled control channel and client library, not a public HTTPS URL to reach an arbitrary port.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/capabilities.md",
   "quote": "| `network` | `bool` | Allow network inside the sandbox. Default `False`. |",
   "note": "Documented egress control is a single all-or-nothing (or hostname-allowlist) network toggle for the SSH workspace namespace; no HTTP method/path-level egress rule capability is documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://docs.hud.ai/platform/rest-api.md",
   "quote": "An environment is the sandboxed application an agent works in, packaged as a container image that HUD hosts.",
   "note": "The card's isolation for this product is a container (not a full VM/microVM with a real kernel network stack the tenant fully controls), so the 'derived from root+full VM' rule for guest_firewall doesn't apply; no in-guest nftables/iptables capability is documented.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.hud.ai/platform/environments.md",
   "quote": "HUD supports EC2 and Modal for hosted environment runs.",
   "note": "Rollouts land on fresh EC2/Modal compute per run; no fixed/static outbound IP feature is documented.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.hud.ai/llms-full.txt",
   "quote": "The CLI and SDK run on macOS, Windows, and Linux. Two caveats: `ssh` sandbox isolation is **Linux-only** ... Both are fine for local iteration and resolved inside a built Linux image.",
   "note": "not offered: the sandboxed environment machines themselves are Linux container images; Windows/macOS are only supported as the developer's local client OS, not as a guest OS for the sandbox.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.hud.ai/llms-full.txt",
   "quote": "The CLI and SDK run on macOS, Windows, and Linux. Two caveats: `ssh` sandbox isolation is **Linux-only** ... Both are fine for local iteration and resolved inside a built Linux image.",
   "note": "not offered: outside the product's scope — environments are Linux container images; macOS is only a supported client OS for the CLI/SDK, not a guest sandbox OS.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": 24,
   "source": "https://www.hud.ai/",
   "quote": "24-hour environment runtime",
   "note": "This is the Enterprise plan's stated environment runtime ceiling (per the card's plans[]); the pay-as-you-go Cloud plan does not publish an explicit max session length, but RuntimeConfig.limits.run_timeout_s is required per task/run, so an unbounded ('none') session is not offered on this platform.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://docs.hud.ai/v6/reference/runtime.md",
   "quote": "| Micro | `t3.small` | 2 | 2 GiB |\n| Small | `t3.medium` | 2 | 4 GiB |\n| Default | `t3.large` | 2 | 8 GiB |\n| Large | `t3.xlarge` | 4 | 16 GiB |\n| Extra Large | `t3.2xlarge` | 8 | 32 GiB |",
   "note": "HUD's hosted EC2 tiers are all AWS `t3.*` instances, which are x86_64-only (AWS's ARM/Graviton burstable family is the separate `t4g` line, not offered here); the Modal-hosted profiles list only CPU/RAM/GPU sizes with no architecture choice. No ARM64 option is documented anywhere in HUD's docs.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": true,
   "source": "https://docs.hud.ai/platform/rest-api.md",
   "quote": "GET /v2/environments/usage: Per-instance environment usage rows. GET /v2/trace/{trace_id}/usage: What this one attempt cost. Both return cost (float), duration_hours, hourly_rate per-instance/per-sandbox, authenticated with HUD_API_KEY bearer token.",
   "note": "granularity: per-sandbox; cost: yes; HUD's REST API exposes two complementary endpoints for per-sandbox usage tracking: /v2/environments/usage returns per-instance environment usage with costs and duration, while /v2/trace/{trace_id}/usage returns cost breakdown per individual trace/attempt within a sandbox. Both endpoints return monetary cost values. Environments can be queried per-job via /v2/jobs/{job_id}/usage for aggregated environment and inference costs.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://docs.hud.ai/platform/environments.md",
 "locations_quote": "HUD supports EC2 and Modal for hosted environment runs.",
 "locations_checked": "2026-10-01"
}