{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": true,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": true,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "scitix-agent-sandbox",
  "checked": "2026-09-30",
  "company": "SCITIX (SGP) TECH PTE. LTD. (ScitiX AI)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.google.com/search?q=%22ScitiX%22+tracxn",
   "quote": "ScitiX is an unfunded Singapore-based technology startup founded in 2025 that provides a platform for training, tuning, and serving AI models."
  },
  "stage": {
   "value": "bootstrapped",
   "source": "https://www.google.com/search?q=%22ScitiX%22+tracxn",
   "quote": "ScitiX is an unfunded company based in Singapore (Singapore), founded in 2025.",
   "confidence": "low",
   "note": "Tracxn (aggregator) lists the company as unfunded/self-funded as of Aug 2026. A separate Google AI-overview summary claimed a seed round 'led by Lobby Capital', but a repeat query on the same engine explicitly retracted that link ('there are currently no public records of a funding round or a direct connection between ScitiX and Lobby Capital... likely confusion with' unrelated deals like StackAI/apate.ai also led by Lobby Capital), so that claim is rejected as an AI-search hallucination, not used here. Legal entity ScitiX (SGP) Tech Pte. Ltd. was incorporated April 2024 in Singapore; a related entity ScitiX Space (SGP) Pte. Ltd. was incorporated January 2023."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "https://www.google.com/search?q=%22ScitiX%22+tracxn",
   "quote": "Funding Status: Unfunded"
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "ScitiX is a Singapore-incorporated (April 2024) AI cloud / GPU infrastructure company (scitix.ai) offering GPU clusters, inference, fine-tuning and, as an open-source side project on GitHub (scitix/Agent-Sandbox, Apache-2.0), an E2B-compatible agent sandbox runtime built on Kubernetes Pods (container isolation, not microVM). No confirmed funding, investors, or revenue figures were found; Tracxn lists it as unfunded. A Google AI-overview surfaced an unverifiable/contradicted claim of a 'seed round led by Lobby Capital' which a repeat search on the same engine explicitly walked back as likely confusion with unrelated Lobby Capital deals (StackAI, apate.ai) — excluded from the stage/funding numbers above out of caution."
 },
 "id": "scitix-agent-sandbox",
 "name": "ScitiX Agent Sandbox",
 "url": "https://scitix.github.io/Agent-Sandbox/",
 "category": "agent-sandbox",
 "isolation": "container",
 "modes": [
  {
   "key": "self-hosted",
   "label": "Self-hosted runtime + externally billed clusters",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": " Native USD public list/reference quote; rates converted using fx.json. Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion."
  },
  {
   "key": "container-backend",
   "label": "Self-hosted container backend",
   "flags": [
    "alt"
   ],
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "features": {
    "isolation": "container"
   },
   "note": "Customer's Kubernetes/cloud bill; no ScitiX hosted tariff."
  },
  {
   "key": "microvm-backend",
   "label": "Self-hosted microVM backend",
   "flags": [
    "alt"
   ],
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "features": {
    "isolation": "vm"
   },
   "note": "Specific microVM hypervisor and resource tariff not published."
  },
  {
   "key": "warm-pool",
   "label": "Pre-warmed pool capacity",
   "flags": [
    "alt"
   ],
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "note": "Idle warm capacity is customer-provisioned and continues to incur chosen infrastructure costs; vendor publishes no unit price."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "Control what a sandbox can reach on the network — denying outbound traffic so an agent under evaluation cannot look up answers or pull extra packages",
     "url": "https://scitix.github.io/Agent-Sandbox/llms.txt"
    },
    {
     "quote": "why can my sandbox still reach the internet",
     "url": "https://scitix.github.io/Agent-Sandbox/llms.txt"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Self-hosted Apache-2.0 software",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Unknown quotas are not confirmed unlimited. "
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": true,
  "gpu_types": [],
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "regions": null,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": true,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": true,
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "guest_firewall": false,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Hosted service price, CPU/RAM dimensions, warm idle costs and direct ScitiX cloud tariff unavailable.",
  "Cross-cloud router must be constrained to satisfy residency.",
  "Unknowns remain null, not free; generic infrastructure modes are opt-in alt.",
  "Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.",
  "VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.",
  "Residency: Placement can route across AWS/GCP/Azure/Volcano/Alibaba/Cloudflare/ScitiX; residency depends on operator routing and clusters."
 ],
 "sources": [
  "https://scitix.github.io/Agent-Sandbox/",
  "https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/index.cs.html"
 ],
 "audit_2026_09_29": {
  "applied": 8,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "pause / resume / snapshots / fork (a sandbox is a claimed Pod, not a microVM, so there is no memory image)",
   "note": "E2B autoPause/autoResume are refused at create (HTTP 400). On idle timeout or kill the Pod is restarted onto the idle image and returned to the pool; state is discarded.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "pause / resume / snapshots / fork (a sandbox is a claimed Pod, not a microVM, so there is no memory image)",
   "note": "Listed under 'Not supported (HTTP 501)', category architectural. Templates are container images you build in your own CI; no snapshot format.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/tutorials/managed-agents/brain-hands",
   "quote": "The brain keeps running wherever you run it; the hands become a sandbox bound to the conversation.",
   "note": "The first-party agent integration ('Brain and Hands', @scitix/agentbox-hands for Claude Agent SDK, OpenCode, generic MCP) is the inverse model: the harness runs outside and only its bash/read/write/edit/grep/glob/apply_patch tools act on the sandbox. No API to start/stream/resume a harness inside the sandbox; the console assistant also runs its brain outside. Agent skills (abx-*) for Claude Code/Codex/OpenCode drive the platform, not an in-sandbox harness.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/egress-and-secrets",
   "quote": "Naming an allow list is what makes everything else a deny — the entries are the whole of what is reachable. A CIDR or a bare IP works in the same list.",
   "note": "Per-sandbox rules on create (E2B network.allow_out / deny_out, allow_internet_access=False), live replacement via PUT /sandboxes/{id}/network. Enforced by an egress-proxy sidecar plus an iptables nat redirect installed by a CAP_NET_ADMIN init container in the Pod netns (not in the sandbox image). Requires the env's gateway switch (overrides.gateway.enabled); otherwise rule-bearing creates are refused 400. Hostnames matched on HTTP Host (:80) / TLS SNI (:443) only; other ports CIDR-only. Metadata/link-local always denied; RFC1918 denied by default. Self-hosted: the operator runs it.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/designs/egress",
   "quote": "`HTTP` rules match on the `Host` header, `TLS` rules on the SNI.",
   "note": "network.rules are per-host header transforms (credential injection), not method/path filters: the injection rule type holds only Host + Headers (handlers/egress.go). No method/path/header allow/deny rules documented.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/envoy/extproc/README.md",
   "quote": "**Validates** the API Key (`SecretKeyStore`).",
   "note": "Sandbox ports are reached through the Envoy data plane (/sandboxes/<id>/<port>/... or x-sandbox-id/x-sandbox-port headers) and the ExtProc validates an API key on every inbound request. Self-hosted: the operator also decides whether/how the ingress is published (Helm ingress.host). No per-port public/private toggle or IP allowlist documented.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/egress-and-secrets",
   "quote": "The value never enters the sandbox. The sandbox holds a **decoy** — a placeholder that looks like a token — and the egress sidecar substitutes the real one as the request leaves, for the hosts and headers the rule names.",
   "note": "Write-only vault (E2B Secret API) + per-sandbox network.rules header transforms for any named host (no wildcards); TLS MITM with a per-sandbox CA installed in the trust store. HTTP/HTTPS on ports 80/443 only; header rewrite only (no body/query); no non-HTTP protocols (DB, SSH). Requires the env's egress gateway.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/envs",
   "quote": "PersistentVolumeClaims mounted into every sandbox",
   "note": "Env-level only (overrides.volumes on the SandboxEnv, Kubernetes PVCs from the operator's cluster). Per-sandbox volumes are unsupported: E2B volumeMounts refused 400 and volume endpoints 501 ('per-sandbox volumes').",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/envs",
   "quote": "PersistentVolumeClaims mounted into every sandbox",
   "note": "An env's PVCs are mounted into every sandbox claimed from that env simultaneously; read-write sharing requires a ReadWriteMany storage class in the operator's cluster (not stated in docs). Derived from the env override semantics.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "a sandbox is a claimed Pod, not a microVM, so there is no memory image",
   "note": "Default runtime is a Kubernetes Pod (runc container, envd runtime). A kata (Firecracker microVM) runtime class is an opt-in template choice for untrusted-code isolation, but the base/default product isolation is a shared-kernel container.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/templates",
   "quote": "an env can serve any image you can pull, and changing that image does not rebuild anything",
   "note": "The image a sandbox runs is chosen per Sandbox.create() call and can be any pullable OCI/Docker image.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": true,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/plugin/skills/abx-sandbox-docker/SKILL.md",
   "quote": "A sandbox can run `docker` and `docker compose`. It is not on by default: the template decides it",
   "note": "Provided via a dedicated 'E2B Docker' template running dockerd (kata microVM or privileged runc), opt-in per SandboxEnv/template.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/examples/templates/e2b-kata",
   "quote": "runs the sandbox Pod privileged... the same privileged dockerd is confined to a guest VM instead of sharing the node's kernel",
   "note": "No /dev/kvm passthrough into the sandbox is documented; nested containers are provided via a kata microVM at the platform level, not KVM exposed to the guest workload.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope (a headless code-execution sandbox engine, no VNC/RDP/stream desktop documented)",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope; no managed/first-party browser is documented",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope; no screenshot/click desktop-driving API documented",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope (code-execution sandbox, not a browsing/scraping stealth product)",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://scitix.github.io/Agent-Sandbox/docs/designs/egress",
   "quote": "installs one `nat` OUTPUT chain in the Pod's network namespace... the egress-proxy sidecar substitutes the real one as the request leaves",
   "note": "Egress is via the cluster/node's own datacenter IPs through an egress-proxy sidecar; no residential/mobile IP product is offered.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "Every sandbox runs **envd**: the agent the E2B SDK talks to. Process exec, ... PTY",
   "note": "Access is via the envd runtime through the E2B-compatible SDK (exec/PTY/files over the gateway), not an SSH server/protocol; no SSH access documented.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "pause / resume / snapshots / fork (a sandbox is a claimed Pod, not a microVM, so there is no memory image)",
   "note": "Snapshot/pause/resume/fork endpoints are refused with HTTP 501/400 as architecturally unsupported.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "architectural | No counterpart here; the caller should stop asking | pause / resume / snapshots / fork",
   "note": "E2B fork calls are answered HTTP 501, listed as architectural (no memory image to fork).",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "architectural | No counterpart here; the caller should stop asking | pause / resume / snapshots / fork",
   "note": "Fork is unsupported entirely, so forking a running machine is also unsupported.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "a sandbox is a claimed Pod, not a microVM, so there is no memory image",
   "note": "No memory image exists to include in a fork/clone.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/e2bcompat/README.md",
   "quote": "`autoPause`, `autoResume`, ... [refused] Refused at create (HTTP 400)",
   "note": "E2B autoPause/autoResume are refused at create; on idle the Pod is restarted onto the idle image and state is discarded, not paused.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/pools",
   "quote": "Running --> Idle : killed, or the idle timeout expires",
   "note": "An idle/killed sandbox's state is discarded (Pod recycled to the idle image), not resumed automatically on the next request — a fresh sandbox must be created instead.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/envs",
   "quote": "overrides.volumes | PersistentVolumeClaims mounted into every sandbox",
   "note": "Card had persistent_disk: null, but volume_attach/volume_shared were already true, contradicting a 'no persistent disk' reading. Correct value is true, opt-in and env-level, not per-sandbox: an env can bind PersistentVolumeClaims (overrides.volumes) that are mounted into every sandbox claimed from that env, so files on that PVC survive a sandbox being killed/idle-reclaimed and a new sandbox from the same env re-mounts it. This is distinct from the sandbox's own ephemeral container filesystem: per the e2bcompat README, 'pause / resume / snapshots / fork' are architectural non-features ('a sandbox is a claimed Pod, not a microVM, so there is no memory image') and 'per-sandbox volumes' (E2B volumeMounts) are refused (HTTP 400/501) - so there is no memory-snapshot pause/resume and no per-sandbox disk, but there IS a first-party persistent disk mechanism (env-scoped shared PVCs) whose contents outlive any individual sandbox's stop/restart. Default (no overrides.volumes configured) is no persistent disk at all - it's opt-in.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/pools",
   "quote": "**Idle** | from the last activity to the sandbox being reclaimed | `timeout=` on the create, `sbx.set_timeout(…)` to extend, the env's default otherwise",
   "note": "Sandboxes are automatically reclaimed after an idle timeout.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/templates",
   "quote": "Resizing a workload means another pool, not another Pod",
   "note": "Pods in one pool share identical resource requests/limits; changing CPU/RAM requires moving to a different pool, not resizing the running Pod.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/tutorials/managed-agents/brain-hands",
   "quote": "The brain keeps running wherever you run it; the hands become a sandbox bound to the conversation.",
   "note": "The 'Brain and Hands' integration lets your own coding-agent harness (Claude Agent SDK, OpenCode, etc.) drive tools inside the sandbox; there is no first-party ScitiX browser/computer-use/research agent product to drive via API.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/designs/cross-cluster",
   "quote": "ExtProc sits in that path and rewrites the request before Envoy routes it",
   "note": "Sandbox ports are reached only through the Envoy/ExtProc gateway data plane, not a public IPv4 address bound to the machine.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/tutorials/e2b",
   "quote": "the gateway that sandbox ports are reached through",
   "note": "Sandbox ports are published and reached via the Envoy/ExtProc gateway; the public URL is HTTPS regardless of the sandbox's own plaintext HTTP listener.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/designs/egress",
   "quote": "`egress-init` (init) | installs one `nat` OUTPUT chain in the Pod's network namespace | needs `CAP_NET_ADMIN`",
   "note": "derived: iptables rule installation requires CAP_NET_ADMIN, granted only to a separate egress-init sidecar, not documented as available inside the sandbox's own container; default isolation is a shared-kernel container, not a full VM.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/designs/egress",
   "quote": "installs one `nat` OUTPUT chain in the Pod's network namespace",
   "note": "Egress flows out through the cluster/node's own network path via an egress-proxy sidecar; no dedicated/fixed outbound IP per sandbox is documented.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "\"operatingSystem\":\"Kubernetes / VirtualMachine\"",
   "note": "not offered: outside the product's scope; the platform runs Linux container/microVM Pods only, no Windows machines documented",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Give your AI agents a secure, isolated environment to execute code, interact with APIs, and use tools in the real world.",
   "note": "not offered: outside the product's scope; Kubernetes Pod / microVM based Linux sandboxes only",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Open-Source Sandbox Engine ... Deploy across any cloud. Leverage the infrastructure your team already trusts.",
   "note": "not offered: the product is self-hosted open-source software (Apache-2.0) deployed into the operator's own cluster, not a hosted service that could hold its own SOC 2 attestation; none is published.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Open-Source Sandbox Engine ... Deploy across any cloud.",
   "note": "not offered: self-hosted open-source software; no HIPAA/BAA program is published",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Open-Source Sandbox Engine ... a unified console for sandbox operations",
   "note": "No SAML/OIDC SSO is documented for the console or API; auth is via API keys per the E2B-compatible API.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/",
   "quote": "Deploy sandbox pools across multiple clouds or regions. ... Supported cloud providers: AWS, Google Cloud, Azure, Alibaba Cloud, Volcengine, Cloudflare.",
   "note": "Residency depends entirely on which clusters/regions the operator deploys into; no first-party EU-region guarantee or offering is published by ScitiX itself.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://scitix.github.io/Agent-Sandbox/docs/concepts/pools",
   "quote": "**Idle** | from the last activity to the sandbox being reclaimed | `timeout=` on the create, `sbx.set_timeout(…)` to extend, the env's default otherwise",
   "note": "Only an idle timeout (extendable indefinitely via set_timeout) is documented; no absolute maximum session length/ceiling is stated, so a continuously active sandbox has no documented cap.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": true,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/pkg/openapi/native/openapi.yaml",
   "quote": "Resource accounting for a single quota, keyed by resource name (e.g. cpu, memory, nvidia.com/gpu, sci.c22-2). ... Pod resource requirements at multiplier=1. Numeric keys (cpu, memory, nvidia.com/gpu, ...) scale linearly with the multiplier.",
   "note": "Since sandboxes are plain Kubernetes Pods, GPU is requested via the standard nvidia.com/gpu resource key on the InstanceType/Pool spec; the API docs' own worked examples include a pool literally named 'gpu-pool' and an instancetype extension field 'gpu-type'. GPU availability depends on the operator's cluster having GPU nodes (self-hosted product), but the feature is natively supported and documented.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://github.com/scitix/Agent-Sandbox/blob/develop/Makefile",
   "quote": "PLATFORMS ?= linux/arm64,linux/amd64,linux/s390x,linux/ppc64le",
   "note": "All first-party sandbox-facing images (envd, idle image, controller/sandbox binary) are built and published for linux/arm64 as well as linux/amd64 (see build-envd.yml, build-idleimage.yml, and build-controller.yml which cross-compiles GOARCH=arm64 and pushes platforms linux/amd64,linux/arm64). The abx CLI release tooling (hack/build-abx.sh, cli/src/update.ts) also ships linux-arm64 and darwin-arm64 binaries. This confirms ARM64 nodes/sandboxes are a first-class supported target of the self-hosted Kubernetes-based product.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://scitix.github.io/Agent-Sandbox/docs/skills/abx-observe",
   "quote": "Metrics come from E2B, not from abx. GET /sandboxes/{id}/metrics returns live resource data (cpuUsedPct, memory, disk), not billable usage. For team-wide usage read abx statistics or the console. ScitiX Agent Sandbox is self-hosted open-source; no cost/billing API exists.",
   "note": "granularity: none; cost: no; The platform is Apache-2.0 self-hosted software. Live metrics endpoints (E2B-compatible GET /sandboxes/{id}/metrics) return instantaneous CPU/memory/disk, not historical billable usage. GetUserSandboxStatistics endpoint returns only sandbox counts by status, not resource consumption. Billing depends on customer's own infrastructure costs.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://scitix.github.io/Agent-Sandbox/",
 "locations_quote": "Open-Source Sandbox Engine … Deploy across any cloud. Leverage the infrastructure your team already trusts.",
 "locations_checked": "2026-10-01"
}