{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": false,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": false,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "mosaic",
  "checked": "2026-09-30",
  "company": "Mosaic OS",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://sandbox.mosaicos.com/",
   "quote": "\"@type\": \"Organization\", \"name\": \"Mosaic OS\", contactPoint email \"nitin@mosaicos.com\""
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No funding, accelerator, investor, or press coverage found for Mosaic OS / mosaicos.com / Mosaic Sandbox. Not found on YC directory, HN (Algolia search returned zero hits for \"Mosaic Sandbox\" and only unrelated results for \"mosaicos\"), Crunchbase (blocked by Cloudflare) or general web search. The product/marketing site gives no team, funding, or company-size details beyond a single contact email (nitin@mosaicos.com), suggesting a very small/early, likely self-funded team."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Mosaic Sandbox (sandbox.mosaicos.com) is a Firecracker/KVM microVM execution API for coding agents run under the brand 'Mosaic OS'. No public information on founders, funding, accelerators, investors, revenue, or headcount could be found (search engines returned no relevant hits, Crunchbase/LinkedIn were inaccessible). Site currently requires a hosted-checkout to bill usage, and contact is a single named individual (nitin@mosaicos.com), consistent with a very early-stage / bootstrapped or unfunded project rather than an established company."
 },
 "id": "mosaic",
 "name": "Mosaic Sandbox",
 "url": "https://sandbox.mosaicos.com/",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "Active compute, $0.05 per billing unit per awake hour (hibernated = $0)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes": [
    {
     "name": "1 vCPU / 2048 MiB (bills as 1 unit)",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": null,
     "hour": 0.05,
     "month_cap": null
    },
    {
     "name": "2 vCPU / 4096 MiB (default, 1 unit, kept warm)",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": 0.05,
     "month_cap": null
    },
    {
     "name": "4 vCPU / 8192 MiB (2 units, cold boot)",
     "vcpu": 4,
     "ram_gib": 8,
     "disk_gib": null,
     "hour": 0.1,
     "month_cap": null
    },
    {
     "name": "8 vCPU / 16384 MiB (4 units, base template only, cold boot)",
     "vcpu": 8,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": 0.2,
     "month_cap": null
    },
    {
     "name": "16 vCPU / 32768 MiB (8 units, base template only, cold boot)",
     "vcpu": 16,
     "ram_gib": 32,
     "disk_gib": null,
     "hour": 0.4,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Pricing page (sandbox.mosaicos.com/pricing): '$0.05/hour, $0.00001389/second, at 2 vCPU / 4 GB. The 4 vCPU guest bills as two of those; the 1 vCPU guest still bills as one.' Docs: 'one SKU, priced per hour at 4096 MB / 2 vCPU ... a guest twice that size bills as two, a smaller one still bills as one'; larger shapes metered at 2x/4x/8x units. Includes RAM and storage; $0 while hibernated. Per-second meter on awake_seconds. If the runtime's awake-time record is unreachable, the gateway falls back to wall-clock lifetime. Auto-hibernation after 3 quiet seconds, but a running process/SSH session prevents hibernation: use the awake_pct knob. Basis re-checked 2026-09-28: units are by configured guest shape (vcpu / memory_mb), i.e. allocation - 'A larger shape is metered at the units it occupies (2x, 4x, 8x)' (sandbox.mosaicos.com/llms.txt); 'Automatic hibernation begins after three quiet seconds'; hibernated '$0', 'No idle charge' (sandbox.mosaicos.com/pricing). Sizes mode kept (flat per-unit price)."
  }
 ],
 "storage": {
  "included_disk_gib": 2,
  "disk_gib_month": 0,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": 0,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "Omit `network` and egress is unrestricted, as before.",
     "url": "https://sandbox.mosaicos.com/docs/"
    },
    {
     "quote": "outbound network egress is on by default",
     "url": "https://sandbox.mosaicos.com/llms.txt"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Metered (checkout required)",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 200,
   "max_session_h": null,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes_allowed": null,
   "note": "Billing model 'metered_active_compute' via a hosted checkout (billing status 'requires_checkout' until a payment method/subscription exists). No base fee, plan tiers, free tier or trial are published; fee 0 assumes pure metering. Concurrency (checked 2026-10-14): pricing page 'Up to 200 sandboxes at once per organization.' / 'Sandboxes alive at once, hibernated ones included 200 Per organization, across all keys Self-serve · Contact us to raise it'; llms.txt 'An organization may have up to 200 sandboxes alive at once across all of its keys, hibernated ones included' (429 organization_sandbox_limit_reached past it; a key's max_active_sandboxes can only narrow it). 1,000 API requests / 5 s per org per edge location; max 100 named environments per org; batch tasks up to 4,000 concurrent; sync exec ceiling 15 min; up to 4 volumes per sandbox.",
   "max_starts_per_min": null,
   "api_requests_per_5s": 1000
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "us"
  ],
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": false,
  "mcp_server": true,
  "isolation": "firecracker",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "max_session_unlimited": true,
  "fast_boot": false,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": 2146.64,
  "dax_s": 60.74
 },
 "perf_source": "benchmarks.json providers.mosaic.computesdk: burst_tti median 2,146.64 ms at 100 concurrency (2026-09-25), dax 60.74 s (2026-09-25, 8 vCPU / 15.64 GiB x86_64). No cold_start_tti entry (null). No hpc CPU run.",
 "knobs": [
  {
   "id": "awake_pct",
   "label": "Share of session the sandbox is awake (not hibernated)",
   "kind": "slider",
   "min": 0.05,
   "max": 1,
   "step": 0.05,
   "default": 1,
   "unit": "%",
   "options": null,
   "effect": "hours_factor",
   "modes": [
    "on-demand"
   ],
   "why": "Only awake time is metered; the host hibernates a sandbox after 3 quiet seconds, but any running process (dev server, agent loop, watcher) prevents hibernation. Agents that idle between LLM turns with no processes pay only for bursts."
  }
 ],
 "caveats": [
  "Not mosaic.so (an unrelated AI video-editing company whose $40/$125 credit plans were scraped by mistake earlier). This card is Mosaic Sandbox at sandbox.mosaicos.com (PyPI mosaic-sandbox), the ComputeSDK 'mosaic' provider.",
  "Unit confirmed 2026-09-28 on sandbox.mosaicos.com/pricing and docs: 1 billing unit = 2 vCPU / 4 GB at $0.05/h ($0.00001389/s); 1 vCPU / 2 GB still bills as 1 unit; 4/8 = 2 units, 8/16 = 4, 16/32 = 8.",
  "'Includes RAM and storage' and '$0 while hibernated': storage and snapshot costs set to 0. Archived sandboxes (persist:true, 7-day retention), named environments (reclaimed after ~30 days unused) and Mosaic Object Storage volumes have no published price; assumed free, unverified.",
  "Larger shapes (4/8 and up) are cold boots because only the default shape is kept warm.",
  "Egress is $0 (pricing: 'Network egress Outbound traffic from the sandbox $0 No per-GB charge'; llms.txt: 'egress is priced at $0: outbound traffic has no separate charge; only awake sandbox time is billed', checked 2026-10-14). No public IPv4 (HTTPS previews + SSH), so no IPv4 price.",
  "No published plans, free tier, minimums, or volume discounts; checkout required before use.",
  "Regions: US only (Silicon Valley, Northern Virginia).",
  "Awake time is metered from the host record; if unreachable, billing falls back to wall-clock lifetime ('estimated' accounting status).",
  "Pricing page: 'RBAC, SSO, and audit logs included' (sso=true); no SOC 2 / HIPAA claim found.",
  "Plan/concurrency: no plan tiers; up to 200 sandboxes alive at once per organization, hibernated ones included, across all keys ('Self-serve · Contact us to raise it', pricing page, checked 2026-10-14). API rate limit 1,000 req / 5 s per org. Fleet capacity can still refuse a create (429 capacity_unavailable).",
  "Pricing page now says 'One SKU for everyone, at three sizes' and lists only 1/2 GB, 2/4 GB (default) and 4/8 GB; the 8/16 and 16/32 shapes (base template only, 4 and 8 units) are still in the docs /v1/limits body and on the roadmap 'Shipped' list, so they stay in the card.",
  "Volumes (/mnt/data, Mosaic Object Storage) hold files up to 78 GiB; still no published storage price. Archived (persist:true) sandboxes 'accrue no CPU metering' and are reclaimed after 7 days unresumed.",
  "Roadmap: the 'published concurrency ceiling' item has shipped (200 per org, see plan). 'Later': GPU-backed sandboxes, an EU region and more regions. Per-organization tariffs exist in the metering model (usage segments capture the 'organization/resource-profile tariff'), so negotiated rates are possible, but no discount is published.",
  "Docker inside runs only on the `base` template; node-20, node-22 and python-3.11 list docker under unavailable_tools (llms.txt, checked 2026-10-14)."
 ],
 "sources": [
  "https://sandbox.mosaicos.com/",
  "https://sandbox.mosaicos.com/pricing",
  "https://sandbox.mosaicos.com/docs/",
  "https://sandbox.mosaicos.com/llms.txt",
  "https://sandbox.mosaicos.com/start/",
  "https://pypi.org/project/mosaic-sandbox/",
  "https://sandbox.mosaicos.com/roadmap/"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": "SSO or email-code verified identity to mint key; metered billing requires hosted Stripe checkout.",
  "tiers": null,
  "notes": "GET /v1/limits exposes effective resource/fork/runtime limits for authenticated organization. No public universal new-account instance/vCPU/GPU quotas or increase route/turnaround identified. API spec example shapes are not aggregate quota; regional capacity can independently refuse creation.",
  "sources": [
   "https://sandbox.mosaicos.com/docs/",
   "https://sandbox.mosaicos.com/start/",
   "https://sandbox.mosaicos.com/llms.txt"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 6,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 2
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Automatic hibernation begins after three quiet seconds.",
   "note": "Trigger: 3 quiet seconds with no running process (a running process or SSH session prevents it); wakes on use/SSH connect. Hibernation is a pause, and 'a pause, a fork and a snapshot capture guest memory', so memory is included. Also persist:true archives the sandbox at its TTL deadline instead of destroying it ('resume brings the same machine, disk and all, back'), kept 7 days.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/snapshots — checkpoint for rollback or branching; pass `name` to make it a reusable environment.",
   "note": "Memory + disk (snapshot requires a quiet sandbox: 409 sandbox_busy if processes run). New sandboxes boot from it via POST /v1/sandboxes with snapshot_id; also live fork of a running sandbox into 1-32 children from its memory image (POST /v1/sandboxes/{id}/fork).",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/prompt — run a coding agent in the sandbox from one prompt",
   "note": "Agents: amp, claude (Claude Code), codex, cursor, gemini, opencode (binaries in node-22-agents template). Returns text/turns/session_id/tool_calls/usage; stream:true gives SSE events (start, message, tool, usage, result, done); reattach via /processes/{id}/logs. POST /v1/sandboxes/{id}/fanout forks once per prompt and runs an agent in each (up to 32). Each run is a finite prompt (stdin closed); no documented follow-up/resume-conversation endpoint.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "A destination is a hostname, a `*.suffix` wildcard, a hostname and port, an IPv4 or IPv6 address, or an IPv4 or IPv6 CIDR; up to 32",
   "note": "Host-side eBPF policy: network.allow (hostnames, wildcards, host:port, IPs, CIDRs, up to 32), network.deny (IP/CIDR only), named phase presets (code-review:setup/execute/report), live changes via POST /v1/sandboxes/{id}/network (allow_all/deny_all/allowlist), optional verify_sni on TCP/443 (closes QUIC), airgapped mode network_enabled:false. Default when network omitted: unrestricted.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Hostnames are enforced as the addresses they resolved to when the policy was set",
   "note": "Egress policy is L3/L4 (+ optional TLS SNI check); no method/path/header egress rules. Only the credential broker grants (http-access) can be narrowed by path prefix ('paths narrows path prefixes'), which applies to brokered requests, not general egress.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/previews — create an expiring HTTP preview URL. The token is unguessable and expires, but the link works without credentials; pass `require_auth: true` to require this organization's API key instead",
   "note": "Per-port preview URLs created explicitly, expiring (60 s-24 h), optional API-key auth, email magic-link shares for private previews, custom preview domains via CNAME. SSH is opt-in (enable_ssh), key-only. No raw TCP / public IPv4.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Firecracker v1.15.1 microVM on KVM with its own kernel; default user has passwordless sudo ('can use passwordless `sudo` inside its VM'). Not documented explicitly.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "HTTP access can stay at the edge for any one public HTTPS host: POST `/v1/sandboxes/{id}/http-access` with `host`, an organization secret name, and an optional injection object.",
   "note": "Edge broker injects bearer/basic/custom header; 'The secret never enters the guest or grant row'. Guest gets a sandbox-scoped bearer capability used at /http/{host}/{path} (a proxy prefix, not transparent), max 24 h, optional path prefixes, one host per grant. Also git-access (GitHub only, git over HTTPS) and cloud-access (AWS SigV4, GCP, Azure). Non-HTTP (SSH keys, database clients, mTLS) not covered: docs say use stored secrets (env vars on guest tmpfs) for those.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/volumes — body `{ \"name\":\"datasets\" }`; a volume is an organization-owned directory backed by Mosaic Object Storage, so two sandboxes on two hosts see the same files and the files outlive both",
   "note": "Object-storage-backed directory mounts (not block devices), up to 4 per sandbox, default /mnt/data; slow for build trees. No published price.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "so two sandboxes on two hosts see the same files and the files outlive both",
   "note": "Read-write by default; per-mount read_only:true option. Backed by Mosaic Object Storage.",
   "checked": "2026-09-29"
  },
  "browser": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/",
   "quote": "Mosaic Sandbox runs untrusted code in Firecracker microVMs.",
   "note": "not offered: outside the product's scope. Mosaic is a Linux code-execution/coding-agent sandbox (templates node-20/22/26, python-3.11/3.14, base); no browser binary, browser template, or browser-control API is documented anywhere in docs, pricing, use-cases or roadmap.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/",
   "quote": "Mosaic Sandbox runs untrusted code in Firecracker microVMs.",
   "note": "not offered: outside the product's scope. No browser is offered, so stealth/fingerprinting against bot detection is not applicable; no mention in docs, security page, or roadmap.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/",
   "quote": "Mosaic Sandbox runs untrusted code in Firecracker microVMs.",
   "note": "not offered: outside the product's scope. A generic code-execution sandbox with no browser product; CAPTCHA solving is not mentioned in docs, pricing, use-cases, or roadmap.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Public-internet egress is allowed by default. Configure deny-all, explicit allowlists or an appropriate egress preset for untrusted execution.",
   "note": "Sandboxes egress through the provider's own datacenter fleet (Silicon Valley / Northern Virginia hosts behind Cloudflare-fronted gateway); no residential/mobile IP offering is documented, and there is no public IPv4 per machine (ipv4_available:false), so outbound addresses are ordinary shared datacenter IPs, not a distinguished residential/mobile pool.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Shapes: 2 vCPU / 4096 MiB by default on every template, also 1/2048 and 4/8192, and on `base` 8/16384 and 16/32768 for work that does not fit the default. A larger shape is metered at the units it occupies (2x, 4x, 8x) and is a cold boot, because only the default shape is kept warm",
   "note": "vcpu/memory_mb are set at POST /v1/sandboxes create time (and fixed on restore from a snapshot); the full REST endpoint list in llms.txt has no route to change a running sandbox's CPU/RAM allocation. Moving to a larger shape requires creating/booting a new sandbox at that shape, not resizing the running one.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/prompt — run a coding agent in the sandbox from one prompt ... `agent` is `amp`, `claude`, `codex`, `cursor`, `gemini` or `opencode`",
   "note": "The /prompt and /fanout APIs drive third-party coding harnesses (Claude Code, Codex, Cursor, Gemini, Amp, OpenCode) installed in the guest — not a first-party Mosaic browser/computer-use/research agent. Mosaic has no own task-agent product; not offered.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Public-internet egress is allowed by default. Configure deny-all, explicit allowlists or an appropriate egress preset for untrusted execution.",
   "note": "No fixed/dedicated outbound IP is documented anywhere (docs, pricing, roadmap); the product exposes hostname/CIDR-based egress allow/deny lists but never a per-sandbox or per-org static IP address, and there is no public IPv4 offering at all (ipv4_available:false) suggesting no static IP addressing exists on this platform.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/security",
   "quote": "This page is product documentation, not an audit report or certification claim. Ask for the current scope and available evidence when you need SOC 2, ISO or sub-processor assurances.",
   "note": "not offered: the security page enumerates current controls and roadmap ('SOC 2, in progress' per the Roadmap page) with no mention of HIPAA eligibility or a BAA anywhere in docs, security, pricing, or roadmap pages.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/timeout — move the inactivity deadline of a running sandbox; `{ttl_seconds: 0}` removes it",
   "note": "The sandbox's only lifetime bound is a caller-set/extendable inactivity TTL, which can be removed entirely (ttl_seconds:0); process lifetime is bounded by the sandbox TTL 'in every case' but that TTL itself has no documented hard ceiling, and persist:true archives (rather than destroys) a sandbox at its deadline, resumable later under the same id. No absolute maximum session length is published.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes/{id}/pause — hibernate ... POST /v1/sandboxes/{id}/resume — restore, whether the sandbox is hibernated or archived ... POST /v1/sandboxes with `persist: true` — archive the sandbox at its deadline instead of destroying it. The id stays addressable at `state: archived` and resume brings the same machine, disk and all, back under it",
   "note": "Contradiction confirmed: pause/hibernate and resume keep the guest's disk (and memory) intact, and `persist:true` archives the sandbox at its TTL deadline (7-day retention) instead of destroying it, resuming 'the same machine, disk and all'. Default behaviour without persist:true is that an unused sandbox is reaped/destroyed at its TTL deadline ('reaped_at_ttl' event), so the correct nuance is: disk persists across pause/resume and across archive (persist:true), but is deleted by default on TTL expiry unless persist:true or an explicit pause is used first. volumes=true and snapshot_auto=true in the card already point the same way.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/security/",
   "quote": "Each sandbox uses a Firecracker/KVM microVM with its own guest kernel and filesystem state. Host-to-guest control uses vsock. This separates guest execution from other guests at a virtual machine boundary; the host kernel, hypervisor and control plane remain part of the trusted system.",
   "note": "No mention anywhere in docs, llms.txt, security page, or roadmap of nested virtualization / exposing /dev/kvm or hardware VT to the guest. The product is a Firecracker microVM (itself a restricted KVM guest); such guests do not expose nested-KVM by default and none is documented as available. Docker/BuildKit container builds inside the guest (docker_inside=true) are namespace-level containers, not nested hardware virtualization.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/about/",
   "quote": "The service exposes a REST API for creating, executing, pausing, resuming, and destroying sandboxes. The mos CLI and the Python, TypeScript, and Go SDKs use the same service. An MCP server makes the lifecycle and command tools available to coding agents, and native SSH is available for sandboxes where SSH is enabled and a reachable endpoint is issued.",
   "note": "Product is a headless Firecracker microVM reached via REST/CLI/SDK/MCP/SSH for coding-agent workloads; no VNC/desktop/GUI streaming interface is offered or mentioned anywhere in docs, llms.txt, or the security page.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/docs/",
   "quote": "What Mosaic has no equivalent for raises where you called it, with the alternative in the message, rather than returning something plausible: Daytona's snapshot and image management APIs (a create naming an image builds a Mosaic environment instead), organization secrets, network settings changed after create, per-sandbox metrics, signed upload and download URLs, computer use, language servers, PTY sessions, GPU and spot.",
   "note": "Explicitly listed as unsupported (the Daytona-compatibility shim raises VercelNotSupportedError/DaytonaNotSupportedError-style errors for 'computer use').",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Create returns `{id,state,tti_ms,ssh_host?,ssh_port?,ssh_connection_string?,ssh_private_key?,ssh_unavailable_reason?}`. ... POST /v1/sandboxes/{id}/previews — create an expiring HTTP preview URL.",
   "note": "Inbound access is only via gateway-issued SSH host/port fields and expiring, path-addressed HTTPS preview URLs (optionally custom-domain CNAMEd to sandbox.mosaicos.com) or the http-access credential broker; there is no raw TCP inbound and no dedicated public IPv4 address assigned to the guest itself (raw_tcp_inbound=false, ipv4_available=false already in card, consistent).",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "It is not the right tool when the workload requires a GPU, a provider-specific managed feature that Mosaic does not expose, or a persistent machine whose data must outlive the sandbox and its archive or external storage workflow.",
   "note": "Also confirmed in the docs compatibility-shim list: 'GPU and spot' raise the not-supported error path. Roadmap 'Later' section lists 'GPU-backed sandboxes' as a future item, not shipped.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Mosaic Sandbox is a Firecracker/KVM execution API for AI agents. ... Firecracker v1.15.1 on Linux KVM; no shared-root containers.",
   "note": "Product is Linux-only Firecracker microVMs (linux/amd64 guests); no Windows guest OS is offered or mentioned anywhere.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "Firecracker v1.15.1 on Linux KVM; no shared-root containers.",
   "note": "Same reasoning as windows: Linux-only microVM guests on KVM; macOS guests are not offered (macOS cannot run as a Firecracker/KVM guest at all).",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/environments — body `{ \"image\":\"python:3.12-slim\", \"name\":\"my-env\", \"replicas\":\"fleet\" }`; ... linux/amd64, needs `/bin/sh`, and the recipe is pinned to the resolved digest when the origin reports one",
   "note": "Custom environments/images are explicitly built for linux/amd64 only; no arm64/aarch64 guest architecture is mentioned anywhere in docs, llms.txt, pricing, or the benchmark note (perf recorded on 'x86_64').",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/about/",
   "quote": "Mosaic Sandbox is an execution environment for coding agents and developer workloads, operated by Mosaic OS.",
   "note": "Product is described throughout as a hosted service ('operated by Mosaic OS'); no self-hosted / on-prem deployment option is offered or mentioned in docs, roadmap, or security pages.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/about/",
   "quote": "Mosaic Sandbox is an execution environment for coding agents and developer workloads, operated by Mosaic OS.",
   "note": "No bring-your-own-cloud / customer-VPC deployment option is mentioned anywhere; only two fixed Mosaic-operated regions (Silicon Valley, Northern Virginia) are served.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/docs/",
   "quote": "python3 -m pip install mosaic-sandbox, npm install @mosaic-sandbox/sdk, or go get github.com/mosaicos-repos/mosaic-sandbox-go",
   "note": "Only the client SDKs (Python/TypeScript/Go) are published on PyPI/npm/GitHub; the sandboxing platform/gateway itself has no published source, license, or open-source repo. 'Open interfaces' on the about page refers to open API/protocol access, not open-source software.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/security/",
   "quote": "This page is product documentation, not an audit report or certification claim. Ask for the current scope and available evidence when you need SOC 2, ISO or sub-processor assurances.",
   "note": "Security page explicitly disclaims that it is not a certification and directs customers to ask for SOC 2/ISO evidence, i.e. no SOC 2 report is published or claimed.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://sandbox.mosaicos.com/docs/",
   "quote": "There is no EU region today, so a workload with EU residency requirements has nowhere to be placed; /v1/limits lists what is actually served rather than what is planned.",
   "note": "Confirmed directly: only Silicon Valley and Northern Virginia (US) regions are served; roadmap lists an EU region under 'Later' (not yet shipped).",
   "checked": "2026-09-30"
  },
  "fast_boot": {
   "value": false,
   "source": "https://www.computesdk.com/benchmarks",
   "quote": "burst of 100: p95 2910 ms, 100% started",
   "note": "ComputeSDK sandbox benchmark 2026-09-25",
   "checked": "2026-09-25"
  },
  "usage_api": {
   "value": true,
   "corrected_from": false,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "GET /v1/usage — what the organization is holding now (`sandboxes.active`, `billing_units.active`) and what the calendar month has cost; requires `billing:read`",
   "note": "granularity: organization; cost: yes (calendar-month cost). Roadmap 'Shipped' also lists 'Stripe checkout, a self-serve billing portal, a public status page, audit events and export, and a usage endpoint' (https://sandbox.mosaicos.com/roadmap/). Keys with billing:read also get x-mosaic-billing-units-active response headers. No per-sandbox or per-tag usage breakdown documented.",
   "checked": "2026-10-14"
  },
  "docker_inside": {
   "value": true,
   "source": "https://sandbox.mosaicos.com/llms.txt",
   "quote": "POST /v1/sandboxes with `template: \"base\"` — the guest can run Docker itself: `docker run`, `docker build`, compose. ... `node-20`, `node-22` and `python-3.11` list `docker` under `unavailable_tools` in `/v1/limits`.",
   "note": "Docker works only on the `base` template; the node-20, node-22 and python-3.11 templates do not ship it. Containers share the sandbox's own memory and vCPU.",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": "CA",
   "city": "Silicon Valley",
   "provider_region": "us",
   "self_serve": true,
   "choosable": false
  },
  {
   "country": "US",
   "state": "VA",
   "city": "Ashburn",
   "provider_region": "us",
   "self_serve": true,
   "choosable": false
  }
 ],
 "locations_source": "https://sandbox.mosaicos.com/llms.txt",
 "locations_quote": "Sandboxes egress through the provider's own datacenter fleet (Silicon Valley / Northern Virginia hosts behind Cloudflare-fronted gateway)",
 "locations_checked": "2026-10-01"
}