{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": false,
  "image_snapshot": false,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "open_internet": false,
  "static_egress_ip": false,
  "private_network": false,
  "self_host": true,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": null,
  "lang_java": true,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "openai-containers",
  "checked": "2026-09-30",
  "company": "OpenAI (OpenAI Group PBC, formerly OpenAI Global LLC / OpenAI, Inc.)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://en.wikipedia.org/wiki/OpenAI",
   "quote": "A for-profit subsidiary was created in 2019, and a 2025 restructuring converted the subsidiary into OpenAI Group PBC, that is 26% owned by the nonprofit OpenAI Foundation. Microsoft has invested over $13 billion into OpenAI."
  },
  "stage": {
   "value": "series-d+",
   "source": "https://en.wikipedia.org/wiki/OpenAI",
   "quote": "In April 2026, the company announced that it closed a funding round of $122 billion in committed capital at a post-money valuation of $852 billion.",
   "confidence": "high",
   "note": "OpenAI is a 2015-founded private company (nonprofit-controlled PBC since 2025) many rounds past series designations; it has filed for an IPO (June 2026) but is not yet public, so mapped to series-d+ as the closest enum bucket for a late-stage mega-round private company, not 'public' or 'subsidiary'."
  },
  "accelerators": [
   {
    "name": "Z Fellows",
    "batch": null,
    "source": "https://www.zfellows.com/",
    "quote": "listed in the Z Fellows portfolio as \"OpenAI\"",
    "confidence": "high",
    "via": "portfolio-domain"
   }
  ],
  "total_funding_usd": {
   "value": 63000000000,
   "status": "estimated",
   "basis": "Sum of disclosed equity rounds per Wikipedia/press: Microsoft ~$1B (2019) + ~$2B (2021-22) + $10B (Jan 2023) + $6.6B (Oct 2024) + $40B (Apr 2025) + $110-122B (Feb-Apr 2026, largely overlapping/extended, counted once) ~= well over $60B; precise cumulative total not published by the company in one place, so treated as an estimate aggregated from multiple confirmed-round press reports.",
   "source": "https://en.wikipedia.org/wiki/OpenAI",
   "quote": "In February 2026, OpenAI raised $110 billion at a $730 billion valuation, led by Amazon ($50 billion), SoftBank ($30 billion), and Nvidia ($30 billion), surpassing the prior round as the largest private technology fundraise in history. The round was extended to $120 billion in March 2026."
  },
  "last_round": {
   "type": "series-d+ (mega-round)",
   "amount_usd": 122000000000,
   "date": "2026-04",
   "leads": [
    "Amazon",
    "SoftBank",
    "Nvidia"
   ],
   "status": "confirmed",
   "source": "https://en.wikipedia.org/wiki/OpenAI",
   "quote": "In April 2026, the company announced that it closed a funding round of $122 billion in committed capital at a post-money valuation of $852 billion."
  },
  "investors": [
   "Microsoft",
   "SoftBank",
   "Amazon",
   "Nvidia",
   "Thrive Capital",
   "Coatue",
   "Altimeter",
   "Oracle",
   "MGX",
   "Founders Fund",
   "Greylock",
   "Madrona Venture Group",
   "Redpoint Ventures",
   "SV Angel"
  ],
  "portfolio_listings": [
   {
    "source": "Founders Fund",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Greylock",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Madrona Venture Group",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Redpoint Ventures",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "SV Angel",
    "company": "IO",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "SV Angel",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Z Fellows",
    "company": "OpenAI",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value_usd": 13100000000,
   "kind": "annual revenue",
   "as_of": "2025",
   "status": "confirmed",
   "basis": "Wikipedia infobox citing CNBC (Feb 20, 2026); a separate Reuters-reported figure (Jan 19, 2026) puts annualized revenue run-rate crossing $20B in 2025, illustrating the gap between full-year revenue and ARR run-rate.",
   "source": "https://www.cnbc.com/2026/02/20/openai-resets-spend-expectations-targets-around-600-billion-by-2030.html",
   "quote": "Revenue US$13.1 billion (2025)"
  },
  "employees": {
   "value": 4500,
   "source": "https://www.ft.com/content/7ffea5b4-e8bc-47cd-adb4-257f84c8028b"
  },
  "note": "This card is for OpenAI's Containers / Code Interpreter / Hosted Shell / Agents API sandbox product, a feature of the OpenAI API platform, not a standalone company. OpenAI itself is one of the best-funded private companies in history: $40B round (Apr 2025, led by SoftBank) then a $110B round (Feb 2026, led by Amazon/SoftBank/Nvidia) extended to $120B (Mar 2026) and further to $122B committed at an $852B post-money valuation (Apr 2026); FT reported investor scrutiny of that $852B mark shortly after. OpenAI filed for an IPO with the SEC in June 2026 but Altman said in September 2026 the IPO is delayed to 2027, so it remains private (stage left as series-d+, not public). Ownership: nonprofit OpenAI Foundation holds 26%, Microsoft holds 27%, employees/other investors hold 47%; Microsoft is a major strategic investor/partner (not a parent) and has a 20%-of-revenue-until-AGI arrangement that was later loosened (Apr 2026). The company reports large ongoing operating losses (~$9B net loss, 2025 est.) alongside rapid revenue growth."
 },
 "id": "openai-containers",
 "name": "OpenAI Containers (Code Interpreter / Hosted Shell)",
 "url": "https://developers.openai.com/api/docs/pricing",
 "category": "agent-sandbox",
 "isolation": "vm",
 "modes": [
  {
   "key": "container-session",
   "label": "Responses API container (Code Interpreter / Hosted Shell), per minute with 5-min minimum",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us",
    "eu"
   ],
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": 64,
   "sizes": [
    {
     "name": "memory_limit 1g",
     "vcpu": null,
     "ram_gib": 1,
     "disk_gib": null,
     "hour": 0.09,
     "month_cap": null
    },
    {
     "name": "memory_limit 4g",
     "vcpu": null,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": 0.36,
     "month_cap": null
    },
    {
     "name": "memory_limit 16g",
     "vcpu": null,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": 1.44,
     "month_cap": null
    },
    {
     "name": "memory_limit 64g",
     "vcpu": null,
     "ram_gib": 64,
     "disk_gib": null,
     "hour": 5.76,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 300,
   "granularity_s": 60,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "features": {
    "isolation": "vm"
   },
   "plans": [
    "API pay as you go"
   ],
   "note": "https://developers.openai.com/api/docs/pricing (2026-09-29): \"Containers | Hosted Shell and Code Interpreter | 1 GB $0.03, 4 GB $0.12, 16 GB $0.48, 64 GB $1.92 per 20-minute session per container.\" + \"Eligible container sessions will be billed by the minute, with a 5-minute minimum per session.\" Changelog 2026-06-02: \"The underlying per-minute rate will remain the same.\" => hour = 3 x 20-min price ($0.0015/$0.006/$0.024/$0.096 per minute). memory_limit enum \"1g\"|\"4g\"|\"16g\"|\"64g\", default \"1g\" (API ref containers/create; openai-python container_create_params.py). vCPU per tier NOT published for Responses containers; the Agents API hosted sandboxes at the same 'standard container rates' are 1 vCPU/1 GB, 2/4 GB, 4/16 GB (see mode agents-api-hosted) - inference only, so vcpu left null here. Runtime Debian 12, /mnt/data, no sudo, no TTY; Python 3.11, Node 22.16, Java 17, PHP 8.2, Ruby 3.1, Go 1.23 (tools-shell guide). \"A container expires if it is not used for 20 minutes.\" (tools-code-interpreter, checked 2026-10-14; tools-shell states no default, only an expires_after {anchor:last_active_at, minutes:20} example and explicit deletion; max undocumented). GA since Code Interpreter 2025-05-20 / Hosted Shell 2026-02-10. Code Interpreter regional processing US + EU (your-data guide). Model tokens billed separately."
  },
  {
   "key": "agents-api-hosted",
   "label": "Agents API OpenAI-hosted sandbox (public beta), small/medium/large at container rates",
   "flags": [
    "beta"
   ],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": [
    1,
    2,
    4
   ],
   "min_vcpu": 1,
   "max_vcpu": 4,
   "max_ram_gib": 16,
   "sizes": [
    {
     "name": "small",
     "vcpu": 1,
     "ram_gib": 1,
     "disk_gib": null,
     "hour": 0.09,
     "month_cap": null
    },
    {
     "name": "medium (default)",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": 0.36,
     "month_cap": null
    },
    {
     "name": "large",
     "vcpu": 4,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": 1.44,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 300,
   "granularity_s": 60,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "features": {
    "isolation": "vm",
    "browser": true,
    "computer_use": true,
    "desktop": null,
    "auto_stop_idle": true,
    "eu_data_residency": false,
    "zero_data_retention": false,
    "open_internet": true
   },
   "plans": [
    "API pay as you go"
   ],
   "note": "https://developers.openai.com/api/docs/guides/agents-api/environments/openai-hosted (2026-09-29): container_size small 1 vCPU/1 GB, medium 2/4 GB (default), large 4/16 GB; \"OpenAI-hosted sandboxes use standard container rates.\" Prices mapped to the 1g/4g/16g container rows. min_billed_seconds/granularity inferred from the container rate card's per-minute/5-min rule (not stated for Agents API). \"Connected sandboxes receive keep-alives, including between turns. If activity and keep-alives stop for an hour, the sandbox can be deleted. This timeout isn't configurable.\" => likely billed for the session's whole life until deleted (unconfirmed). Network default enabled; restricted = 1-100 exact hosts. Hosted browser via environment.desktop.enabled (agents-api/tools/computer-use). \"The Agents API currently supports data residency only in the United States and does not support Zero Data Retention (ZDR).\" Public beta since 2026-09-10 (changelog). Covered in depth by the 'new' research agent."
  },
  {
   "key": "codex-cloud",
   "label": "Codex Cloud task VM (bundled in ChatGPT seat; tokens/credits only)",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": [
    2,
    4
   ],
   "min_vcpu": 2,
   "max_vcpu": 4,
   "max_ram_gib": 16,
   "sizes": [
    {
     "name": "Plus / Edu Plus task VM",
     "vcpu": 2,
     "ram_gib": 8,
     "disk_gib": 8,
     "hour": null,
     "month_cap": null
    },
    {
     "name": "Pro / Business / Enterprise / Edu task VM",
     "vcpu": 4,
     "ram_gib": 16,
     "disk_gib": 32,
     "hour": null,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "features": {
    "isolation": "vm",
    "snapshot": "fs",
    "persistent_disk": true,
    "custom_image": false,
    "code_interpreter": false,
    "agent_harnesses": true,
    "browser": false,
    "computer_use": false,
    "egress_allowlist": true,
    "credential_injection": true,
    "private_network": true
   },
   "plans": [
    "ChatGPT Plus",
    "ChatGPT Pro $100",
    "ChatGPT Business",
    "ChatGPT Enterprise/Edu"
   ],
   "note": "Not a programmable sandbox: no public API (API-key plan has \"No cloud-based features\"). VM table (https://learn.chatgpt.com/docs/environments/cloud-environments, 2026-09-29): \"Plus, Edu Plus | 2 | 8 GiB | 8 GiB\"; \"Pro, Business, Enterprise | 4 | 16 GiB | 32 GiB\"; \"Edu, Edu Pro | 4 | 16 GiB | 32 GiB\"; \"Larger VMs and custom specifications are available for Enterprise. Contact your OpenAI account team\". No compute charge: rate cards say cloud tasks are charged on \"the actual input, cached input, and output tokens consumed\" (help 11481834 / 20001415); 1 credit ~= $0.04 (derived: 250 credits per 1M GPT-6 Astra input tokens vs $10.00 API). hour=null because compute is bundled and capped by unpublished 5-hour/weekly usage limits. \"a task's saved VM state is recoverable for up to seven days\"; published environments snapshot the prepared filesystem. Network: allowlist presets / unrestricted, HTTPS network-secret substitution, Tailscale VPN, OIDC (Enterprise by request). Unsupported: \"Computer and browser use\"."
  },
  {
   "key": "chatgpt-agent-mode",
   "label": "ChatGPT agent mode / Work cloud browser (per message, credits)",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "cloud computer + browser (size unpublished)",
     "vcpu": null,
     "ram_gib": null,
     "disk_gib": null,
     "hour": null,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "features": {
    "isolation": "vm",
    "browser": true,
    "computer_use": true,
    "code_interpreter": false
   },
   "plans": [
    "ChatGPT Plus",
    "ChatGPT Pro $100",
    "ChatGPT Business",
    "ChatGPT Enterprise/Edu"
   ],
   "note": "Consumer/enterprise feature, no API. Business/Enterprise credit rate card (help 11481834): \"Agent mode | 1 message | 30 credits\" (~$1.20/message at derived $0.04/credit). \"Work uses its own browser, running on a separate computer in the cloud\" (https://learn.chatgpt.com/docs/browser). Work Cloud: \"tasks run in VM-backed sandboxes\" on \"shared, OpenAI-managed infrastructure\" (enterprise/chatgpt-work-cloud-security). Machine size and per-plan quotas unpublished / help center unreachable 2026-09-29."
  }
 ],
 "storage": {
  "included_disk_gib": 0,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "allowlist",
   "allowlist": "domains your org admin adds to the allow list",
   "evidence": [
    {
     "quote": "Hosted containers don't have outbound network access by default.",
     "url": "https://developers.openai.com/api/docs/guides/tools-shell"
    },
    {
     "quote": "An admin must configure your org allow list in the dashboard.",
     "url": "https://developers.openai.com/api/docs/guides/tools-shell"
    },
    {
     "quote": "Your org allow list defines the full set of `allowed_domains`.",
     "url": "https://developers.openai.com/api/docs/guides/tools-shell"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "API pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "waives_start_fee": false,
   "included_applies_to_modes": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "max_starts_per_min": 100,
   "note": "Containers bill on top of model tokens. Code Interpreter tool: \"100 RPM per org\" (tools-code-interpreter usage table) - encoded as max_starts_per_min (it caps tool requests, not container creations; hosted shell limit unpublished). No published container concurrency cap or per-usage-tier limits (rate-limits guide silent). Container expires 20 min after last activity; each distinct container is its own session."
  },
  {
   "name": "ChatGPT Plus",
   "fee": 20,
   "flags": [
    "alt"
   ],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "waives_start_fee": false,
   "included_applies_to_modes": [
    "codex-cloud",
    "chatgpt-agent-mode"
   ],
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 2,
   "max_ram_gib": 8,
   "sizes_allowed": [
    "Plus / Edu Plus task VM",
    "cloud computer + browser (size unpublished)"
   ],
   "note": "$20/month (https://learn.chatgpt.com/docs/pricing). Shared 5-hour + weekly agentic allowance (e.g. GPT-6 Sol 15-160 local messages / 5 h; \"Cloud tasks may use more of your allowance\"); extra usage via purchased credits."
  },
  {
   "name": "ChatGPT Pro $100",
   "fee": 100,
   "flags": [
    "alt"
   ],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "waives_start_fee": false,
   "included_applies_to_modes": [
    "codex-cloud",
    "chatgpt-agent-mode"
   ],
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 4,
   "max_ram_gib": 16,
   "sizes_allowed": null,
   "note": "Pro plans $100 / $200 / $500 per month; \"Pro plans currently have no five-hour limit\" (weekly limits may apply). New Pro $200 sign-ups paused since 2026-09-10 (help 9793128)."
  },
  {
   "name": "ChatGPT Business",
   "fee": 25,
   "flags": [
    "alt"
   ],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 25,
   "waives_start_fee": false,
   "included_applies_to_modes": [
    "codex-cloud",
    "chatgpt-agent-mode"
   ],
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 4,
   "max_ram_gib": 16,
   "sizes_allowed": null,
   "note": "\"$20 / user / month*\" (2+ users, billed annually) or \"$25 per user per month when billed monthly\"; per-seat limits, then workspace credits. Codex-only usage-based seats need credits from first use."
  },
  {
   "name": "ChatGPT Enterprise/Edu",
   "fee": null,
   "flags": [
    "alt",
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "waives_start_fee": false,
   "included_applies_to_modes": [
    "codex-cloud",
    "chatgpt-agent-mode"
   ],
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Contact sales. Flexible (credit) pricing: \"no fixed rate limits\"; larger/custom Codex Cloud VMs by request."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "price_expires": null,
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": false,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": false,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": false,
  "self_host": true,
  "byoc": false,
  "open_source": false,
  "regions": [
   "us",
   "eu"
  ],
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": null,
  "lang_java": true,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "isolation": "vm",
  "image_oci": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": true,
  "egress_allowlist_level": "domain",
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": "any-http",
  "volume_attach": false,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "own_agent_api": false,
  "egress_ip_type": "datacenter",
  "max_session_unlimited": true,
  "open_internet": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "perf_source": "No benchmark row: provider is not in ComputeSDK results or the HPC run (as of 2026-09-29). See research/perf-map.json.",
 "knobs": [
  {
   "id": "executions_per_session",
   "label": "Code executions per container session",
   "kind": "slider",
   "min": 1,
   "max": 500,
   "step": 1,
   "default": 1,
   "unit": "calls",
   "options": null,
   "effect": "session_pack",
   "modes": [
    "container-session",
    "agents-api-hosted"
   ],
   "map": null,
   "why": "Calls that reuse one container (container_reference / auto-reuse within 20 min) are one session billed per minute with a 5-minute minimum. 200k isolated 1-minute runs on 1g cost $1,500 (5-min floor each) vs $300 if packed."
  },
  {
   "id": "idle_expiry_tail",
   "label": "Idle tail until 20-min expiry is billed (x session hours)",
   "kind": "slider",
   "min": 1,
   "max": 5,
   "step": 0.05,
   "default": 1,
   "unit": "x",
   "options": null,
   "effect": "hours_factor",
   "modes": [
    "container-session",
    "agents-api-hosted"
   ],
   "map": null,
   "why": "OpenAI does not say whether the minutes between last use and expiry (20 min for containers, 1 h keep-alive window for Agents API sandboxes) are billed. If they are and you don't DELETE the container, factor = (session + tail)/session, e.g. 5-min run + 20-min tail = 5x. Default 1 assumes explicit deletion."
  }
 ],
 "caveats": [
  "Model input/output tokens are billed separately and are not in this estimate; for short runs they often exceed container cost.",
  "vCPU per Responses container tier is not published; the engine matches container-session on RAM only. The Agents API beta mode publishes 1/2/4 vCPU for 1/4/16 GB at the same rates (suggestive, not confirmed for Responses containers). 64 GB tier vCPU unknown.",
  "Per-minute billing with 5-minute minimum applies to 'eligible' sessions since 2026-06-02 ('eligible' undefined); 2026-03-31 to 2026-06-01 each session was billed in full 20-minute blocks; before that $0.03-$1.92 per container.",
  "Whether idle minutes until the 20-minute expiry are billed is undocumented; delete containers explicitly (DELETE /v1/containers/{id}). See knob idle_expiry_tail.",
  "No snapshots or persistence: an expired container's data is 'discarded … not recoverable'. No documented max lifetime; keeping a container alive requires touching it at least every 20 minutes (or a larger expires_after.minutes, max undocumented).",
  "Outbound network is disabled by default for Responses API containers (Code Interpreter / Hosted Shell); enabling requires an admin-configured org allow list plus a per-request network_policy allowlist. domain_secrets inject credentials via a sidecar. No inbound ports/URLs. The Agents API hosted sandbox (beta mode) is the opposite: network.access 'enabled' ('Allow outbound access. This is the default unless you inherit a template policy.'), with disabled / restricted (1-100 exact hosts) as opt-ins. The card-level internet default stays 'allowlist', so the internet-access check also holds that mode to an allowlist.",
  "Only rate limit published: Code Interpreter '100 RPM per org'. No container concurrency cap, no usage-tier table, nothing for hosted shell.",
  "Disk size of containers not published ('ephemeral block storage').",
  "Isolation: documented only as 'a fully sandboxed virtual machine'; hypervisor (gVisor/Firecracker/etc.) not named.",
  "EU/US regional processing documented for the Code Interpreter tool; hosted shell not listed separately; whether the 10% data-residency uplift applies to containers is unknown.",
  "Agents API hosted sandbox (beta mode): US-only data residency, no ZDR, 1-hour non-configurable keep-alive expiry; billing granularity inferred from the container rate card.",
  "Codex Cloud and ChatGPT agent mode (alt modes) have no compute price: compute is bundled into ChatGPT seats and consumed as token credits (~$0.04/credit derived) under unpublished 5-hour/weekly limits; no public API, so not a substitute for a programmable sandbox.",
  "Assistants API code interpreter ($0.03/session, 1-hour session) shut down 2026-08-26; not modelled.",
  "soc2/hipaa/sso left null: not re-verified in this pass (previous card had soc2 true)."
 ],
 "sources": [
  "https://developers.openai.com/api/docs/pricing",
  "https://developers.openai.com/api/docs/changelog",
  "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
  "https://developers.openai.com/api/docs/guides/tools-shell",
  "https://developers.openai.com/api/docs/guides/tools-skills",
  "https://developers.openai.com/api/docs/guides/your-data",
  "https://developers.openai.com/api/reference/resources/containers/methods/create",
  "https://developers.openai.com/api/docs/guides/agents-api/environments/openai-hosted",
  "https://developers.openai.com/api/docs/guides/agents-api/overview",
  "https://developers.openai.com/api/docs/guides/agents/sandboxes",
  "https://developers.openai.com/api/docs/deprecations",
  "https://github.com/openai/openai-python/blob/main/src/openai/types/container_create_params.py",
  "https://github.com/openai/openai-agents-python/blob/main/src/agents/tool.py",
  "https://learn.chatgpt.com/docs/environments/cloud-environments",
  "https://learn.chatgpt.com/docs/pricing",
  "https://learn.chatgpt.com/docs/browser",
  "https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security",
  "https://help.openai.com/en/articles/11481834-chatgpt-rate-card-business-enterpriseedu-credit-based-pricing",
  "https://help.openai.com/en/articles/20001415-chatgpt-rate-card-enterprise-token-based-pricing",
  "https://community.openai.com/t/1374010"
 ],
 "feature_evidence": {
  "open_internet": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers don’t have outbound network access by default. To enable it: An admin must configure your org allow list in the dashboard. You must explicitly set network_policy on the container environment in your request.",
   "note": "Card-level false is the Responses API container default (allowlist only). The agents-api-hosted mode overrides open_internet to true: https://developers.openai.com/api/docs/guides/agents-api/environments/openai-hosted says \"enabled Allow outbound access. This is the default unless you inherit a template policy.\"",
   "checked": "2026-10-14"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "A container expires if it is not used for 20 minutes. When this happens, using the container in `v1/responses` will fail. You'll still be able to see a snapshot of the container's metadata at its expiry, but all data associated with the container will be discarded from our systems and not recoverable.",
   "note": "Only metadata is kept at expiry; files and memory are discarded. Agents API hosted sandboxes are likewise deleted after 1 h without activity; only files in /workspace/outputs survive, as immutable artifacts published at the end of each turn (not a machine snapshot).",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "You can't move a container from an expired state to an active one. Instead, create a new container and upload files again. Note that any state in the old container's memory (like python objects) will be lost.",
   "note": "The Containers API has create/list/retrieve/delete plus file endpoints only; no snapshot/checkpoint endpoint. Agents API 'environment_template_id' saves configuration only: 'Templates save configuration, not a running workspace.' Agents SDK snapshots apply to sandboxes you run elsewhere (local/E2B/Modal/...), not OpenAI containers.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/overview",
   "quote": "The Agents API gives your application access to the Codex harness through an OpenAI-managed API.",
   "note": "Agents API (public beta, OpenAI-Beta: agents=v1): POST /v1/agents/sessions with environment.type openai_hosted; stream events, webhooks, follow-up messages that steer an active turn ('A message sent during an active turn steers that turn'), list/retrieve/delete sessions. Harness = managed Codex only. Caveat: the harness runs on OpenAI's side and executes commands in the sandbox ('The harness runs commands in the sandbox directly'), rather than running inside it. The Responses API shell/code-interpreter tools alone would not count.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers don't have outbound network access by default. To enable it: 1. An admin must configure your org allow list in the dashboard. 2. You must explicitly set `network_policy` on the container environment in your request.",
   "note": "Default-deny. Containers API network_policy: 'disabled' or 'allowlist' with allowed_domains; org allow list caps request-level lists. Agents API hosted sandbox: network.access enabled (default) / disabled / restricted ('Restricted mode accepts 1-100 exact host names ... Do not include wildcards, protocols, paths, or ports'). No IP/CIDR rules documented.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/environments/openai-hosted",
   "quote": "Restricted mode accepts 1–100 exact host names, such as `api.example.com`. Do not include wildcards, protocols, paths, or ports.",
   "note": "Allowlist is exact hostnames only; no method/path/header rules documented. The secret proxy does header substitution only (placeholder -> secret) for approved hosts.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No inbound access at all: no port exposure, preview URL or public IP in the Containers API, hosted shell or Agents API hosted sandbox; interaction is only via the API (files endpoints, tool calls). Nothing to control, so false (not applicable).",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted shell commands don't run with `sudo`.",
   "note": "Documented as 'a fully sandboxed virtual machine' but commands run without root/sudo, so nftables/iptables cannot be configured. Hypervisor not named.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "The model and runtime see placeholder names (for example, `$API_KEY`) instead of raw credentials. The auth-translation sidecar applies raw secret values only for approved destinations. Raw secret values don't persist on API servers and don't appear in model-visible context.",
   "note": "Responses API containers: network_policy.domain_secrets [{domain,name,value}] for any allowlisted domain. Agents API hosted sandbox: vault credentials of type environment_variable with auth.networking.allowed_hosts; 'The sandbox receives a placeholder in the named environment variable. The real secret stays outside the sandbox.' (https://developers.openai.com/api/docs/guides/agents-api/tools/vaults). HTTPS only: 'The proxy supplies secrets only to HTTPS destinations on port 443 or 8443'; placeholder must be passed unchanged in a request header, cannot be used for signing. No database/SSH/git-over-SSH coverage.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers used by Hosted Shell and Code Interpreter may write temporary application state to the container filesystem (backed by ephemeral block storage) while the container is active. Container data is deleted when the container expires or is explicitly deleted.",
   "note": "Only ephemeral block storage; inputs via file_ids / inline files / skills copied in. No volume or mount parameter in the Containers API or Agents API hosted environment.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/environments/openai-hosted",
   "quote": "Each session has a separate workspace. Files persist across turns while its sandbox exists.",
   "note": "No shared filesystem between containers/sessions; files must be copied in per container (file_ids).",
   "checked": "2026-09-29"
  },
  "docker_inside": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted shell commands don't run with sudo.",
   "note": "No root/sudo inside the container and no Docker/OCI runtime, /dev/kvm, or nested-container capability is documented anywhere in the Containers API, tools-shell, or tools-code-interpreter guides; the runtime is described only as a fixed Debian 12 environment with preinstalled language runtimes.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "Code Interpreter allows models to write and run Python code in a sandboxed execution environment... Hosted Shell and Code Interpreter | 1 GB $0.03, 4 GB $0.12, 16 GB $0.48, 64 GB $1.92 per 20-minute session per container.",
   "note": "not offered: outside the product's scope. This mode is a code-execution/shell container (no browser, no anti-fingerprinting or stealth capability documented anywhere in the Containers API).",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "Code Interpreter allows models to write and run Python code in a sandboxed execution environment... Hosted Shell and Code Interpreter | 1 GB $0.03, 4 GB $0.12, 16 GB $0.48, 64 GB $1.92 per 20-minute session per container.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability is documented for the Containers API code/shell environment; it has no inbound browser surface and outbound network is disabled by default.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security",
   "quote": "Work uses its own browser, running on a separate computer in the cloud.",
   "note": "OpenAI's own browser/computer-use task agent is ChatGPT agent mode / Work, which has no public API (consumer/enterprise-only, per-message credits). The Agents API's computer_use tool drives the same managed Codex coding harness (already captured by harness_api), not a separate first-party 'own task agent' API distinct from the coding harness.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "You must explicitly set network_policy on the container environment in your request.",
   "note": "Only a domain allowlist mechanism is documented (network_policy.allowed_domains / org allow list); no fixed/static outbound IP address is offered or mentioned anywhere in the Containers or Agents API docs.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": true,
   "source": "https://openai.com/enterprise-privacy",
   "quote": "Our API Platform has been audited and certified for SOC 2 Type 2 compliance. Read more in our Trust Portal",
   "note": "Applies to the API Platform, which is what the Containers API (Responses API containers) and Agents API run on.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": true,
   "source": "https://openai.com/enterprise-privacy",
   "quote": "We are able to sign Business Associate Agreements (BAA) in support of customers' compliance with the Health Insurance Portability and Accountability Act (HIPAA). Please reach out if you require a BAA.",
   "note": "BAA available on request for API/enterprise customers; not automatic/default for every account.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://openai.com/enterprise-privacy",
   "quote": "Enterprise-level authentication through SAML SSO",
   "note": "SAML SSO is offered for OpenAI's enterprise-tier platform/workspace access (organization admin console), covering the org that owns the API Platform containers.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers used by Hosted Shell and Code Interpreter may write temporary application state to the container filesystem (backed by ephemeral block storage) while the container is active. Container data is deleted when the container expires or is explicitly deleted.",
   "note": "No persistent volume/disk option in the Containers API or Agents API hosted sandbox; Agents API workspace files exist only 'while its sandbox exists' (deleted after ~1h idle). Default on expiry is full delete, no opt-in persistence.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "You'll still be able to see a snapshot of the container's metadata at its expiry, but all data associated with the container will be discarded from our systems and not recoverable.",
   "note": "Only container metadata survives expiry, not filesystem/memory. No create/list/retrieve/delete snapshot endpoint anywhere in the Containers or Agents API.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "You can't move a container from an expired state to an active one. Instead, create a new container and upload files again. Note that any state in the old container's memory (like python objects) will be lost.",
   "note": "No pause/resume API for containers or Agents API sandboxes; they expire and are deleted, not paused.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No clone/fork parameter or endpoint on containers or Agents API environments; environment_template_id only reuses configuration, not a running instance ('Templates save configuration, not a running workspace').",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "Same as fork: no clone-from-running-instance capability documented anywhere in the Containers or Agents API.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "any state in the old container's memory (like python objects) will be lost.",
   "note": "In-memory state is explicitly lost on expiry/recreate; no memory-snapshot cloning feature exists.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted shell commands don't run with sudo.",
   "note": "No root/sudo and no /dev/kvm or nested-virtualization documented; commands run unprivileged inside the managed sandbox, so nested virtualization is outside what the product offers. Derived, not directly stated.",
   "checked": "2026-09-30"
  },
  "root": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted shell commands don't run with sudo.",
   "note": "Direct statement: no root/sudo inside hosted containers or the Agents API hosted sandbox.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No SSH-related parameter anywhere in the Containers or Agents API; interaction is only through API calls (shell tool, files endpoints, session events) plus for self-hosted sandboxes an outbound WebSocket executor - never inbound SSH.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": true,
   "corrected_from": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/tools/computer-use",
   "quote": "Set environment.type to openai_hosted and environment.desktop.enabled to true. ... Each browser operation returns its last emitted screenshot in output ... { \"type\": \"computer_screenshot\", \"image_url\": \"data:image/jpeg;base64,...\" }",
   "note": "The Agents API's OpenAI-hosted sandbox offers a real screenshot-streamed graphical desktop (environment.desktop.enabled) for the computer_use tool - a VNC/RDP-style stream, just scoped to the hosted browser rather than a general-purpose GUI. Card's top-level features had this false even though its own agents-api-hosted mode lists browser/computer_use as true; correcting to true (browser-scoped desktop) rather than the plain container-session/Code-Interpreter mode, which indeed has no desktop.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": true,
   "corrected_from": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/tools/computer-use",
   "quote": "Let an agent complete tasks in an OpenAI-hosted browser. ... The Agents API runs the browser in an OpenAI-hosted environment.",
   "note": "OpenAI provides a first-party managed hosted browser via the Agents API computer_use tool (public beta, not an 'alt' mode). Top-level features:false contradicts the card's own agents-api-hosted mode (browser:true); correcting to true.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": true,
   "corrected_from": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/tools/computer-use",
   "quote": "Add { \"type\": \"computer_use\" } to agent.tools. Set environment.type to openai_hosted and environment.desktop.enabled to true.",
   "note": "computer_use is a documented first-party tool type that drives the hosted browser by screenshots/actions. Contradicts top-level features:false vs. the card's own agents-api-hosted mode (computer_use:true); correcting to true.",
   "checked": "2026-09-30"
  },
  "custom_image": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "Only memory_limit selects an enum size (1g/4g/16g/64g); no image/base-image parameter for Containers API or Agents API openai_hosted environment. Self-hosted Agents API environments run wherever you host them, but that's your own compute image, not an OpenAI custom-image feature.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No Docker/OCI image reference parameter anywhere in the container/environment creation APIs.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-code-interpreter",
   "quote": "A container expires if it is not used for 20 minutes. When this happens, using the container in `v1/responses` will fail.",
   "note": "Expired containers fail hard and must be recreated; there is no sleep+auto-wake behaviour, only expire-and-delete.",
   "checked": "2026-09-30"
  },
  "volumes": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers used by Hosted Shell and Code Interpreter may write temporary application state to the container filesystem (backed by ephemeral block storage) while the container is active.",
   "note": "Only ephemeral block storage; no attachable/mountable volume parameter in the Containers or Agents API.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No port-exposure, preview-URL, or ingress parameter for containers, hosted shell, or Agents API hosted/self-hosted sandboxes; all interaction is via outbound API calls only.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "No IP address is exposed to containers or sandboxes; network_policy only controls outbound egress, and self-hosted sandboxes connect outbound only over WebSocket.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/overview",
   "quote": "The managed Codex harness supports: Running commands and code in a sandbox. ... The Agents API gives your application access to the Codex harness through an OpenAI-managed API.",
   "note": "The Codex harness runs OpenAI-side and drives the sandbox from outside ('the harness runs commands in the sandbox directly'); it is not a preinstalled coding-agent template (Claude Code/Codex CLI/OpenCode) that you invoke inside the box yourself - that capability is tracked separately as harness_api (already true on the card). agent_harnesses:false stands.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/overview",
   "quote": "Agents can operate in a sandbox where they can execute code, edit files, connect to MCP servers, and produce artifacts.",
   "note": "OpenAI's containers/Agents API let the agent CONNECT OUT to third-party MCP servers as a tool; OpenAI does not ship its own MCP server for controlling containers/sandboxes (no such endpoint documented).",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Current preinstalled languages include: Python 3.11, Node.js 22.16, Java 17.0, PHP 8.2, Ruby 3.1, Go 1.23",
   "note": "No GPU tier is offered or priced for containers/hosted shell/Agents API sandboxes; product is a small CPU sandbox for code execution and browser/shell tools, not accelerated compute. Outside the product's scope.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Runtime is currently based on Debian 12 and may change over time.",
   "note": "Linux-only runtime (Debian 12); no Windows machine option.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Runtime is currently based on Debian 12 and may change over time.",
   "note": "Linux-only runtime; no macOS option documented anywhere in Containers/Agents API.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": true,
   "corrected_from": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/environments/self-hosted",
   "quote": "Connect your own environment when you want more control over the agent's environment or want to use compute you trust. The environment can be a laptop, a container, or a remote sandbox. ... OpenAI runs the agent harness. You run codex exec-server, the executor, inside your environment.",
   "note": "The Agents API explicitly supports self-hosted sandboxes: you run the compute (laptop/container/your own cloud sandbox) and OpenAI only supplies the managed harness over an outbound WebSocket. That is exactly 'run it on your own infrastructure'; top-level self_host:false is wrong for this product line and should be true (Agents API self_hosted environment.type).",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/agents-api/environments/self-hosted",
   "quote": "The executor registers with the API using an environment ID and a restricted API key. It then connects over WebSocket to receive commands and return results. All connections are outbound.",
   "note": "This is bring-your-own-compute connecting outbound to OpenAI's control plane (closer to self_host, already corrected to true), not OpenAI's managed service being deployed inside the customer's own cloud account (BYOC). No BYOC deployment model is offered.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/pricing",
   "quote": "Containers | Hosted Shell and Code Interpreter | 1 GB $0.03, 4 GB $0.12, 16 GB $0.48, 64 GB $1.92 per 20-minute session per container.",
   "note": "Commercial hosted API product with per-usage pricing; the container runtime and Agents API service are closed-source (only the codex CLI executor for self-hosted mode and SDK client libraries are open source, not the sandbox/container service itself).",
   "checked": "2026-09-30"
  },
  "private_network": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers don't have outbound network access by default. To enable it: 1. An admin must configure your org allow list in the dashboard. 2. You must explicitly set `network_policy` on the container environment in your request.",
   "note": "Networking is domain-allowlist based only (no VPC/VPN/private-peering into a customer network) for the OpenAI-hosted container/sandbox product; the unrelated 'alt' Codex Cloud ChatGPT product's Tailscale VPN option doesn't apply here.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills",
   "note": "memory_limit (or container_size for Agents API) is fixed at creation; no API to change CPU/RAM of a running container/sandbox without recreating it.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Hosted containers don't have outbound network access by default. To enable it: 1. An admin must configure your org allow list in the dashboard. 2. You must explicitly set `network_policy` on the container environment in your request.",
   "note": "derived: outbound access is a domain-allowlist mechanism on OpenAI's own managed API-platform infrastructure; no residential/mobile proxy network, and no static/dedicated egress IP is documented or offered anywhere in the Containers or Agents API docs, so egress is ordinary shared cloud-datacenter IP space.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://developers.openai.com/api/docs/guides/tools-shell",
   "quote": "Runtime is currently based on Debian 12 and may change over time. Current preinstalled languages include: Python 3.11, Node.js 22.16, Java 17.0, PHP 8.2, Ruby 3.1, Go 1.23",
   "note": "not offered: the runtime is a single fixed managed image/size (memory_limit enum only); no CPU-architecture selector (ARM vs x86) is exposed anywhere in the Containers API, Agents API hosted sandbox, or docs.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "expires_after: optional object { anchor, minutes } Container expiration time in seconds relative to the 'anchor' time. anchor: \"last_active_at\" ... minutes: number",
   "note": "derived: no maximum total session lifetime is published. Expiry is purely inactivity-based (default 20 minutes since last_active_at, extendable via expires_after.minutes with no documented cap) and resets on activity, so an actively-used session/container is not capped at a fixed number of hours by the provider. Agents API hosted sandboxes similarly expire only after ~1h of no activity/keep-alives ('this timeout isn't configurable'), again with no stated maximum total runtime while kept alive.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://developers.openai.com/api/reference/resources/containers/methods/create",
   "quote": "Body Parameters: name, expires_after, file_ids, memory_limit, network_policy, skills. Container expiration time in seconds relative to the 'anchor' time.",
   "note": "granularity: none; cost: no; OpenAI Containers API provides only create, list, retrieve, delete, and file endpoints. No usage/billing query endpoint exists. Per-minute billing with 5-minute minimum is documented but not queryable programmatically; billing appears only on invoices/dashboard.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://developers.openai.com/api/docs/guides/your-data",
 "locations_quote": "Code Interpreter regional processing US + EU. Agents API hosted sandbox (beta mode): US-only data residency.",
 "locations_checked": "2026-10-01"
}