{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": true,
  "desktop_control": false,
  "browser_and_desktop": false,
  "anti_bot": true,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": true,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": true,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": true,
  "fast_boot": false,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": false,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "opencomputer",
  "checked": "2026-09-30",
  "company": "OpenComputer (Digger, Inc.)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://news.ycombinator.com/user?id=iacguy",
   "quote": "co-founder of opencomputer.dev (also built digger.dev, opentaco.dev and co-founded opentofu)"
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No YC/accelerator page, no press release, and no aggregator profile (Crunchbase, Growjo, Tracxn) was reachable (blocked/404) to confirm a funding stage. OpenComputer is a product from the team behind digger.dev (open-source Terraform CI/CD, GitHub org diggerhq) and opentofu; the same GitHub org (diggerhq) hosts the opencomputer repo, indicating OpenComputer is a pivot/new product line of the same company rather than a separately-funded spinout, but no primary source states a funding round or amount for either Digger or OpenComputer."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "OpenComputer (opencomputer.dev) is built by the same team/GitHub org (diggerhq) as Digger.dev, an open-source Terraform CI/CD tool, whose co-founder Igor Zalutski (HN handle 'iacguy') also co-founded OpenTofu and opentaco.dev; OpenComputer's positioning pivoted in Sept 2026 from generic VM sandboxes to 'the platform for long-running agents' (serverless TypeScript agents), per its own blog and docs. Extensive search attempts (DuckDuckGo, Bing, Crunchbase, Growjo, Tracxn, Wayback Machine, YC directory, HN Algolia) found no funding announcement, investor names, round size, or revenue figure for either Digger or OpenComputer; search engines largely returned bot-challenge pages or unrelated cached results in this environment, limiting verification. Treat funding/stage/revenue as genuinely unknown rather than bootstrapped-by-default; do not infer YC/accelerator affiliation from the shared 'Digger' name with an unrelated 2021 'Alicorn Cloud'/other Digger HN threads, which refer to a different product."
 },
 "id": "opencomputer",
 "name": "OpenComputer",
 "url": "https://opencomputer.dev/sandboxes",
 "category": "agent-sandbox",
 "isolation": "vm",
 "modes": [
  {
   "key": "on-demand",
   "label": "Machine time per second (2 GB/1 vCPU default, auto-burst to 4/2 or 8/4)",
   "flags": [
    "burstable"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "qemu-vm"
   },
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    2,
    2
   ],
   "ram_fixed_per_vcpu": 2,
   "vcpu_options": [
    1,
    2,
    4
   ],
   "min_vcpu": 1,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes": [
    {
     "name": "0.25 vCPU / 0.5 GB (bursts to 1/2)",
     "vcpu": 0.25,
     "ram_gib": 0.5,
     "disk_gib": 8,
     "hour": 0.0474,
     "month_cap": null
    },
    {
     "name": "0.5 vCPU / 1 GB (bursts to 2/4)",
     "vcpu": 0.5,
     "ram_gib": 1,
     "disk_gib": 8,
     "hour": 0.0948,
     "month_cap": null
    },
    {
     "name": "default 1 vCPU / 2 GB (bursts to 4/8)",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 8,
     "hour": 0.189,
     "month_cap": null
    },
    {
     "name": "2 vCPU / 4 GB (bursts to 8/16)",
     "vcpu": 2,
     "ram_gib": 4,
     "disk_gib": 16,
     "hour": 0.378,
     "month_cap": null
    },
    {
     "name": "4 vCPU / 8 GB (bursts to 16/32)",
     "vcpu": 4,
     "ram_gib": 8,
     "disk_gib": 32,
     "hour": 0.756,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Published as $0.00079 / $0.00158 / $0.00315 / $0.00630 / $0.01260 per minute for the 0.25/0.5, 0.5/1, 1/2, 2/4 and 4/8 baselines, 'billed to the second', only while running; hibernated time bills no compute. Bare sandboxes burst automatically to 4x baseline and 'Burst time is billed at the peak rate' (the full 4x peak price, not an intermediate tier), so the burst_share knob understates bursty sandbox cost; pick the baseline that fits steady load. Agent sessions: default 2 GB/1 vCPU, burst to 4 GB/2 vCPU ($0.00630/min) or 8 GB/4 vCPU ($0.01260/min). Linear: $0.0945 per (1 vCPU + 2 GB)-hour. Idle timeout resets on every operation (exec, file access, agent activity), then the sandbox 'auto-hibernates if possible, otherwise stops'.",
   "cpu_class": "shared",
   "baseline_pct": 25
  }
 ],
 "storage": {
  "included_disk_gib": 8,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "full"
  }
 },
 "plans": [
  {
   "name": "PAYG",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 4,
   "max_ram_gib": 8,
   "sizes_allowed": null,
   "note": "No commitment; $10 one-time free credit."
  },
  {
   "name": "Pro",
   "fee": 20,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 200,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 4,
   "max_ram_gib": 8,
   "sizes_allowed": null,
   "note": "'Your $20 becomes 10x the usage credit' = $200/month of credit at PAYG rates, covering machine time AND model tokens; beyond it PAYG. Bill = $20 + max(0, usage - $200). Rollover of unused credit not stated. Credit shared with model calls (API rates) and machine time."
  },
  {
   "name": "Max",
   "fee": 200,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 2000,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 4,
   "max_ram_gib": 8,
   "sizes_allowed": null,
   "note": "$200/mo with '10x prepaid credit, at scale' = $2,000/month (re-verified 2026-09-28 on opencomputer.dev/pricing: 'Enough to keep 10+ default machines running around the clock'). The credit is shared with model calls at API rates, so it only covers machine time to the extent tokens don't use it. Beyond credit: PAYG."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Own cloud/VPC, self-hosted connections, volume pricing, higher limits, SSO, audit log, priority support. Unpublished."
  }
 ],
 "extras": [
  {
   "item": "Model tokens",
   "price": "Passed through at API rates, no markup; $0 with own key or Codex subscription; drawn from Pro/Max credit"
  },
  {
   "item": "Extra disk"
  },
  {
   "item": "Burst Sandboxes (alpha, restartable)",
   "price": "'roughly 2x cheaper than on-demand' — exact rate unpublished"
  },
  {
   "item": "Reserved capacity (memory GB per 15-min interval)",
   "price": "Reserved rate unpublished; overage at on-demand"
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 10
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "regions": [],
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": true,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": true,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "browser_control": true,
  "desktop_control": false,
  "anti_bot": true,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "ip_note": "Browser Sessions (CDP URL, stealth flag, profiles, live view) are invite-only preview; sandbox egress goes through OpenComputer's secrets proxy; no residential/proxy product documented.",
  "isolation": "microvm",
  "image_oci": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "egress_allowlist_level": "domain",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": false,
  "volume_shared": true,
  "own_agent_api": true,
  "fast_boot": false,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": 75.77,
  "burst_tti_ms": 4278.23,
  "dax_s": null
 },
 "perf_source": "computesdk benchmarks: cold_start_tti median 75.77 ms (2026-08-07, 100 iterations); burst_tti median 4,278 ms at 100 concurrency (2026-09-16, 93% success; last run 2026-09-25 failed); DAX never succeeded. Measured the OpenComputer sandbox API, shape unspecified.",
 "knobs": [
  {
   "id": "running_share",
   "label": "Share of session wall-time the machine is awake (rest hibernated)",
   "kind": "slider",
   "min": 0.05,
   "max": 1,
   "step": 0.05,
   "default": 1,
   "unit": "%",
   "options": null,
   "effect": "hours_factor",
   "modes": [
    "on-demand"
   ],
   "why": "Machines hibernate after idle (300 s default for sandboxes) and hibernated time bills no compute; agent sessions waiting on a human cost nothing."
  },
  {
   "id": "burst_share",
   "label": "Time spent at the requested tier vs the 2 GB / 1 vCPU default",
   "kind": "select",
   "min": null,
   "max": null,
   "step": null,
   "default": 1,
   "unit": null,
   "options": [
    {
     "value": 1,
     "label": "Always at requested tier (x1)"
    },
    {
     "value": 0.625,
     "label": "4/8 half the time, 1/2 otherwise (x0.625)"
    },
    {
     "value": 0.25,
     "label": "Mostly at the 1 vCPU / 2 GB default (x0.25)"
    }
   ],
   "effect": "rate_factor",
   "modes": [
    "on-demand"
   ],
   "why": "Sessions default to 2 GB / 1 vCPU and burst automatically; you pay the burst tier only while in it. Options are illustrative mixes for a 4/8 workload (0.5 x 0.756 + 0.5 x 0.189 = 0.4725 = 0.625 x 0.756)."
  }
 ],
 "caveats": [
  "Bare-sandbox pricing is now published separately (https://opencomputer.dev/sandboxes): machine time only, same per-unit rate as agent sessions, and 'Plans and prepaid credit on the agents page apply here too.'",
  "Dated change: July 2026 guides (2026-07-20) quoted '$0.004/min flat = $0.24/hr' for a 4 GB / 1 vCPU default with RAM resizable 1-16 GB; current pricing is $0.00315/min for 2 GB / 1 vCPU with bursts to 8 GB / 4 vCPU max.",
  "Pro/Max: the credit is 10x the fee and covers both tokens and machine time; encoded as fee + included_usd (not fee_is_credit). Rollover/expiry of unused credit not stated.",
  "Agent computers have a one-hour maximum running time and are replaced between commands (PR #806, 2026-09-25); sessions themselves have no time-based expiry. max_session_h left null.",
  "Hibernated-state storage, extra disk (EBS-gp3-like, unpublished), egress, IPv4 and concurrency limits are unpublished (null).",
  "Reserved capacity (15-min memory reservations, non-refundable, >=30 min lead) and Burst Sandboxes (~2x cheaper, restartable, alpha) exist in v1 docs but have no published rates, so they are not modeled as modes.",
  "Isolation: QEMU on KVM per the vendor's own guide. Region(s) unpublished.",
  "Benchmarks: DAX never succeeded; latest burst run failed (2026-09-25).",
  "Pro/Max included credit (10x fee) is shared between model tokens and machine time (\"credit applies to both model calls (at API rates) and machine time\"); the estimate assumes all of it goes to machine time, which is optimistic if the agent also spends tokens.",
  "SSH: none. Interactive access is a PTY \"like SSH but over WebSocket\" via the SDK (docs.opencomputer.dev/sandboxes/interactive-terminals). Desktop: none documented; only headless Chromium (\"drive a browser\").",
  "Fork (features check 2026-09-28): v1 docs say checkpoints let you \"Fork new sandboxes from it ... like git branches for VMs\" (disk-only or full disk+memory+CPU checkpoint). Docker-inside and /dev/kvm are not documented (null).",
  "Product pivot (2026-09): homepage now 'The platform for long-running agents' (serverless agents defined in TypeScript); docs.opencomputer.dev and its llms.txt cover only Serverless Agents, and the sandbox and browser-session doc pages there return 404. Sandbox docs survive only on docs-v1.opencomputer.dev (older runtime: 1/4/8/16 GB tiers). The sandboxes marketing page is the only current sandbox price source.",
  "Idle default: for bare SDK sandboxes the default timeout is 0 = never auto-hibernate, so a sandbox created with defaults bills until killed; idle hibernation needs an explicit timeout (e.g. 300 s). Agent sessions hibernate when idle by default (docs-v1.opencomputer.dev/sandboxes/timeout.md)."
 ],
 "sources": [
  "https://opencomputer.dev/pricing",
  "https://opencomputer.dev/",
  "https://docs.opencomputer.dev/sandboxes/overview",
  "https://docs.opencomputer.dev/sandboxes/checkpoints",
  "https://docs-v1.opencomputer.dev/sandboxes/elasticity.md",
  "https://docs-v1.opencomputer.dev/sandboxes/burst-sandboxes.md",
  "https://docs-v1.opencomputer.dev/sandboxes/usage.md",
  "https://docs-v1.opencomputer.dev/reserved-capacity/usage-and-overage.md",
  "https://docs-v1.opencomputer.dev/reserved-capacity/reserving.md",
  "https://opencomputer.dev/guides/e2b-alternatives/",
  "https://opencomputer.dev/guides/qemu-vs-kvm/",
  "https://github.com/diggerhq/opencomputer/pull/806",
  "https://docs-v1.opencomputer.dev/sandboxes/checkpoints.md",
  "https://docs-v1.opencomputer.dev/sandboxes/timeout.md",
  "https://docs-v1.opencomputer.dev/guides/build-a-lovable-clone.md",
  "https://github.com/diggerhq/opencomputer/blob/main/SELFHOSTING.md"
 ],
 "audit_2026_09_29": {
  "applied": 6,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 5
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/timeout.md",
   "quote": "Snapshots the VM state (memory + disk) and stops the VM — no compute cost while hibernated.",
   "note": "Trigger: idle timeout expiry (rolling, resets on any exec/file/agent activity); memory + disk included; any SDK call auto-wakes it ('Any operation from the SDK automatically wakes a hibernated sandbox', sub-second restore) and so does a visit to its URL (see wake_on_request). Only when a timeout is set: bare SDK sandboxes default to timeout 0 = never auto-hibernate (troubleshooting page says 300 s; docs inconsistent). Managed agent sessions also 'hibernate when idle, resume where they left off' (homepage).",
   "checked": "2026-10-14"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/guides/build-a-lovable-clone.md",
   "quote": "When a deployed sandbox receives no traffic, it is automatically hibernated to save resources. When someone visits the deploy URL, the sandbox is woken up on demand.",
   "note": "Stated in the v1 deploy guide only; the preview-URL reference does not say a valid request wakes a sandbox, but implies it ('a brute-force run also can't wake a hibernated sandbox'; 'bad tokens can't burn wake capacity'). The timeout page still suggests calling sandbox.wake() 'to pre-warm a sandbox before routing user traffic to it', so expect wake latency on the first request. Requires a non-zero idle timeout (bare SDK default 0 = never hibernates).",
   "checked": "2026-10-14"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/checkpoints.md",
   "quote": "A checkpoint is a named snapshot of a running sandbox. Fork new sandboxes from it to start from a known-good environment — like git branches for VMs.",
   "note": "Full checkpoint (default) = 'Disk, memory, and CPU state'; kind 'disk_only' = rootfs + workspace disk. Restore in place or Sandbox.createFromCheckpoint() to fork many new sandboxes. Also explicit hibernate API and named template Snapshots (image builds). Current sandboxes page: 'checkpoint · fork'.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://github.com/diggerhq/opencomputer/blob/main/sdks/python/opencomputer/agent.py",
   "quote": "\"\"\"Agent session API for running Claude Agent SDK inside a sandbox.\"\"\"",
   "note": "sandbox.agent.start({prompt, model, systemPrompt, allowedTools, permissionMode, maxTurns, mcpServers, resume}) streams typed events (assistant/result/tool_use_summary/turn_complete), sendPrompt() follow-ups, interrupt(), attach(sessionId), list(). Harness: Claude Agent SDK only; marked @deprecated in the TS SDK in favour of the provider's own Managed/Serverless Agents Management API (https://docs.opencomputer.dev/agents/api: 'Create sessions, send turns, read the event log and manage projects over HTTP'), which runs OpenComputer's own agent loop on an agent computer (models via managed inference, BYOK or a Codex subscription).",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/secrets.md",
   "quote": "Requests to hosts not on the list are blocked by the proxy.",
   "note": "Allowlist is set on a SecretStore attached at sandbox create (exact hosts + wildcards like *.openai.com; empty = all hosts). Enforced by the host-side MITM proxy (outside the VM). Docs inconsistent on the default: how-it-works says 'full outbound internet access via a TAP device with NAT. No firewall or allowlist to configure', while the browser guide says a sandbox without a secretStore 'has no outbound egress at all' (407 from the proxy). No IP/CIDR rules documented; non-HTTP traffic handling undocumented.",
   "checked": "2026-09-29",
   "level": "domain"
  },
  "egress_http_rules": {
   "value": true,
   "source": "https://docs.opencomputer.dev/agents/secrets.md",
   "quote": "OpenComputer checks the declared origin, path prefix, method, agent, and environment before sending the outbound request",
   "note": "Only for the managed Serverless Agents product: defineConnection({origin, methods, pathPrefix, headers}) restricts secret-backed requests by method and path prefix; logged as egress.request/response events. Bare v1 sandboxes: host allowlist + per-secret allowedHosts only (no method/path rules documented).",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/preview-urls.md",
   "quote": "To require a bearer token in front of every request, opt in at create time with `previewAuth`.",
   "note": "Preview URLs (sb-<id>-p<port>.workers.opencomputer.dev) are public by default; optional per-sandbox bearer token (Authorization or X-OC-Preview-Token), checked at the control plane before traffic reaches or wakes the VM; token rotatable. One token gates every port. No IP allowlists documented; no public IPv4.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Full Linux VM per sandbox (QEMU/KVM; Firecracker backend also in source) with its own kernel and TAP NIC; docs examples write to /root. Not documented explicitly.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://docs-v1.opencomputer.dev/sandboxes/secrets.md",
   "quote": "only revealed by a host-side proxy on outbound HTTPS requests",
   "note": "SecretStore secrets are injected into the VM as sealed tokens (osb_sealed_...); the host-side MITM proxy swaps them for the real value on outbound HTTPS to allowed hosts; per-secret allowedHosts. Any HTTP API, not just model keys. HTTPS only; DB/SSH/git not covered (mount credentials for S3/SFTP etc. live in VM tmpfs). Managed agents: secrets 'injected after the request leaves the machine' via declared connections; GitHub App connection hands the agent a short-lived installation token directly.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://opencomputer.dev/sandboxes",
   "quote": "Additional disks — bottomless storage that persists across sandboxes — are on the way.",
   "note": "Announced, not available yet. Root disk only (8-32 GB by size). FUSE mounts of your own buckets exist (see volume_shared).",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/mounts.md",
   "quote": "Mount remote filesystems directly into your sandbox so your code reads and",
   "note": "Preview Mounts API (sandbox.mounts.add) runs rclone FUSE mounts of your own S3/GCS/Azure Blob/SFTP/WebDAV/Dropbox remote; read-write; the same bucket can be mounted by many sandboxes at once (no provider-hosted shared FS; no cross-mount consistency guarantees). Credentials live in VM tmpfs, not via the secret proxy.",
   "checked": "2026-09-29"
  },
  "docker_inside": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/introduction.md",
   "quote": "Not a container. Real VM with its own kernel, memory, and disk. Hardware-level isolation via KVM.",
   "note": "Not explicitly documented for customer workloads (docs only show `sudo docker run ...` for OpenComputer's own self-hosted control-plane host, not inside a customer sandbox). Derived: each sandbox is a full Linux VM with its own kernel and root/sudo access (guides use `sudo apt-get install ...`), so a standard Docker Engine install should run like on any Linux box; not vendor-confirmed for guest use.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/introduction.md",
   "quote": "Not a container. Real VM with its own kernel, memory, and disk. Hardware-level isolation via KVM.",
   "note": "Not offered/documented: the only KVM/nested-virtualization content describes OpenComputer's own host infrastructure, not a /dev/kvm passthrough exposed inside customer sandboxes. Production self-hosting (github SELFHOSTING.md) supports Azure and AWS (OPENSANDBOX_COMPUTE_PROVIDER=azure|aws) with 'Bare-metal worker instances with nested virtualization/KVM available'; the v1 docs additionally have a single-VM GCP development cell ('nested-KVM Compute Engine VM', docs-v1.opencomputer.dev/self-hosting/gcp-development.md). No mention of nested virtualization as a guest capability.",
   "checked": "2026-10-14"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/guides/browser-automation.md",
   "quote": "OpenComputer sandboxes are full Linux VMs, which means you can run a real Chromium browser inside them the same way you would on a laptop.",
   "note": "not offered: outside the product's scope. Browser automation is via CDP/Playwright (browser_control) or a raw VNC iframe for humans to click into; there is no first-party API that takes screenshots and issues click/type coordinates to drive a desktop on the agent's behalf.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/guides/browser-automation.md",
   "quote": "If the site has a good API, use the API. A browser is slower, heavier, and flakier. But when you need it, OpenComputer gives you real VMs — not containers — so you can run full Chromium with no Docker-flavored limitations.",
   "note": "not offered: outside the product's scope. The browser-automation and browser-sessions docs cover launching/connecting Chromium (headless/headful, stealth flag, profiles) but never mention CAPTCHA-solving; no such service is documented.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs-v1.opencomputer.dev/sandboxes/secrets.md",
   "quote": "full outbound internet access via a TAP device with NAT",
   "note": "Sandbox egress is plain datacenter NAT through OpenComputer's own host proxy (also used for secret injection); no residential/mobile/proxy IP product is documented anywhere in the sandbox, browser-sessions, or pricing docs.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/checkpoints.md",
   "quote": "Checkpoint | Original sandbox Keeps running | Can fork Yes — unlimited new sandboxes",
   "note": "Checkpointing (needed to fork) explicitly does not stop the source sandbox, unlike hibernation which does; `Sandbox.createFromCheckpoint()` can be called any number of times while the original keeps running.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/checkpoints.md",
   "quote": "Full checkpoint | Disk, memory, and CPU state | You want the fastest fork or restore path from an exact running VM state.",
   "note": "Full checkpoints (the default) capture memory + CPU state and forks are created from them, but the same page also cautions: 'the platform attempts warm restore when possible, but may fall back to a cold boot. Don't assume running processes carry over' — so it's best-effort, not a hard guarantee.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": true,
   "source": "https://docs.opencomputer.dev/agents/api.md",
   "quote": "Create sessions, send turns, read the event log and manage projects over HTTP with an API key.",
   "note": "OpenComputer's Serverless Agents Management API creates sessions and drives OpenComputer's own managed agent loop (models via useModel/managed inference or BYOK, tools, MCP servers) on a provider-run computer — this superseded/deprecated the earlier Claude-Agent-SDK-specific harness_api. It's a general task-agent API rather than one scoped only to browser/computer-use, but it is the provider's own agent loop, not a bring-your-own coding harness.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/introduction.md",
   "quote": "pip install opencomputer-sdk",
   "note": "First-party Python SDK (async), shown alongside the TypeScript SDK in every quickstart/example.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/introduction.md",
   "quote": "npm install @opencomputer/sdk",
   "note": "First-party TypeScript/Node SDK; the Serverless Agents product is defined as TypeScript functions run with the OpenComputer CLI/SDK.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/secrets.md",
   "quote": "full outbound internet access via a TAP device with NAT",
   "note": "not offered: no static/fixed/dedicated outbound IP is documented anywhere; outbound traffic goes through a shared host-side NAT/TAP device and secrets proxy with no mention of a per-sandbox fixed egress IP.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/interactive-terminals.md",
   "quote": "A PTY session is a full interactive terminal inside the sandbox — like SSH but over WebSocket.",
   "note": "No SSH server/keys; interactive access is a proprietary PTY-over-WebSocket API (`sandbox.pty.create`) and `oc shell`, explicitly described as an SSH substitute, not SSH itself.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/llms-full.txt",
   "quote": "For workflows where the user needs to log in themselves, you can render the browser to a virtual display and expose it via VNC. ... Install the VNC stack at runtime (same no-rebuild pattern as per-boot setup): sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq xvfb x11vnc novnc websockify",
   "note": "No managed graphical desktop/VNC/RDP/stream product. The docs' 'headed browser' recipe has the user apt-get install Xvfb/x11vnc/noVNC/websockify themselves inside a plain Linux VM and wire it through a preview URL — this is a DIY guide on generic compute, not a first-party desktop feature.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/templates.md",
   "quote": "Declarative images are cached by content hash ... const image = Image.base().aptInstall(['curl', 'jq']).pipInstall(['requests', 'pandas']).env({ PROJECT_ROOT: '/workspace' }).workdir('/workspace');",
   "note": "custom_image is true via OpenComputer's own declarative Image-builder DSL (apt/pip/run-command steps layered on their base template) and named Snapshots, not by pulling an arbitrary Docker/OCI image; no registry-pull or 'FROM <image>' mechanism found anywhere in the sandbox docs.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/preview-urls.md",
   "quote": "A preview URL is a public HTTPS endpoint that routes traffic to a port inside your sandbox. ... Every sandbox has a built-in `domain` property that gives you instant access to port 80 without creating a preview URL explicitly",
   "note": "Inbound access is exclusively via HTTPS reverse-proxy preview URLs (sb-<id>-p<port>.workers.opencomputer.dev); no public IPv4/raw-TCP address is assigned to sandboxes anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://docs.opencomputer.dev/llms-full.txt",
   "quote": "OpenComputer owns the agent harness. For each step it: ... Managed harness",
   "note": "OpenComputer runs its own proprietary managed agent loop ('harness') for Serverless Agents; there is no preinstalled Claude Code / Codex CLI / OpenCode etc. offered as sandbox templates. (The older, now-deprecated Python SDK `sandbox.agent` wrapper only drove the Claude Agent SDK programmatically, again not a preinstalled CLI harness template.)",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://opencomputer.dev/sandboxes",
   "quote": "(no occurrence of the string 'gpu' anywhere on the page)",
   "note": "No GPU offering is mentioned on the pricing/marketing page or in the sandbox docs (which describe only CPU-based QEMU/KVM microVMs); no GPU instance sizes, gpu_types, or GPU pricing anywhere.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/overview.md",
   "quote": "A sandbox is a full Linux virtual machine in the cloud.",
   "note": "Sandboxes are explicitly defined as Linux VMs only; no Windows machine option exists anywhere in the docs, marketing pages, or SDK reference.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/overview.md",
   "quote": "A sandbox is a full Linux virtual machine in the cloud.",
   "note": "Product is QEMU/KVM Linux virtualization on Linux hosts; no macOS guest offering exists (macOS only appears as a host platform for the `oc` CLI download, not as a sandbox OS).",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://opencomputer.dev/guides/qemu-vs-kvm/",
   "quote": "QEMU on KVM",
   "note": "Sandboxes run as x86_64 QEMU/KVM guests; the only 'arm64' hits in the docs are the `oc` CLI's own darwin-arm64/linux-arm64 download binaries for the operator's host machine, not a sandbox VM architecture option. No ARM guest sizes/pricing published anywhere.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://opencomputer.dev/",
   "quote": "ENTERPRISE Custom On your terms Your own cloud or VPC, self-hosted connections Volume pricing and higher limits SSO, audit log, priority support Talk to us",
   "note": "No SOC 2 attestation is documented anywhere: /security, /trust, /compliance, and /pricing all 404 on the marketing site, and the Enterprise tier's feature list (which explicitly names SSO and audit log) does not mention SOC 2. A full grep of the archived v1 docs zip and current docs llms-full.txt finds zero occurrences of \"SOC\". Treated as not (yet) offered rather than genuinely unknown, since the provider does itemize its compliance-adjacent Enterprise features elsewhere and SOC 2 is absent from that list.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://opencomputer.dev/",
   "quote": "ENTERPRISE Custom On your terms Your own cloud or VPC, self-hosted connections Volume pricing and higher limits SSO, audit log, priority support Talk to us",
   "note": "No HIPAA/BAA mention found anywhere: dedicated /security, /trust, /compliance pages 404, and a full-text grep of the current docs and the archived v1 docs.zip has zero occurrences of \"HIPAA\". The Enterprise plan's explicit feature list (own VPC, SSO, audit log) does not include HIPAA eligibility or a BAA offer.",
   "checked": "2026-09-30"
  },
  "cpu_class": {
   "value": {
    "on-demand": "burstable:25"
   },
   "source": "https://opencomputer.dev/sandboxes",
   "quote": "BASELINE BURSTS TO MAX DISK $/MIN $/MIN AT PEAK 0.5 GB / 0.25 vCPU 2 GB / 1 vCPU 8 GB $0.00079 $0.00315 ... 2 GB / 1 vCPU DEFAULT 8 GB / 4 vCPU 8 GB $0.00315 $0.01260 ... Burst time is billed at the peak rate.",
   "note": "Every published size bursts to exactly 4x its baseline vCPU/RAM (0.25->1, 0.5->2, 1->4, 2->8, 4->16 vCPU), i.e. the steady baseline is 25% of the peak burstable capacity; billed at the (higher) peak rate only while actually bursting. No published sustained-load guarantee beyond the baseline tier, consistent with oversubscribed/burstable vCPUs rather than dedicated cores.",
   "checked": "2026-09-30"
  },
  "fast_boot": {
   "value": false,
   "source": "https://www.computesdk.com/benchmarks",
   "quote": "burst of 100: p95 4871 ms, 93% started",
   "note": "ComputeSDK sandbox benchmark 2026-09-16",
   "checked": "2026-09-16"
  },
  "usage_api": {
   "value": true,
   "source": "https://docs-v1.opencomputer.dev/sandboxes/usage.md",
   "quote": "GET /api/sandboxes/:id/usage returns a per-minute time series of a sandbox's memory — both the tier you provisioned and what the process actually consumed — together with envelope totals. For cross-sandbox leaderboards (rank by usage, group by tag) see the aggregator at GET /api/usage instead.",
   "note": "granularity: per-sandbox; cost: no; REST API + TypeScript SDK return memory allocated/used in GiB-seconds and disk overage in GiB-seconds; these are billable quantities but not costs. Supports per-sandbox usage and groupBy=tag for tag-based aggregation. Documentation states the billing pipeline uses these numbers directly.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://opencomputer.dev/",
 "locations_quote": "Region(s) unpublished.",
 "locations_checked": "2026-10-01"
}