{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": null,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "seacloudai",
  "checked": "2026-09-30",
  "company": "SeaArt, Inc. (SeaCloudAI sandbox gateway; app published by SunriseAI Pte. Ltd.)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://itunes.apple.com/search?term=seaart&entity=software&limit=10",
   "quote": "sellerName: SUNRISEAI PTE. LTD."
  },
  "stage": {
   "value": "unknown",
   "source": "",
   "quote": "",
   "confidence": "low",
   "note": "No funding announcement, press coverage, or aggregator profile could be located for SeaArt / SunriseAI Pte. Ltd. or for the SeaCloudAI sandbox product specifically. TechCrunch site search and Bing News returned zero results for 'SeaArt AI funding'; Crunchbase organization pages for both 'seaart' and 'sunriseai' returned HTTP 403 (no public profile reachable)."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "SeaCloudAI is the code/agent sandbox gateway hosted under seaart.ai's infrastructure (sandbox-gateway.cloud.seaart.ai), the same domain family as SeaArt AI, a consumer AI image/video generation platform ('© 2026 SeaArt, Inc.' per the site footer). The SeaArt AI mobile app on the iOS App Store is published by 'SUNRISEAI PTE. LTD.' (a Singapore Pte Ltd entity), which is the most concrete ownership signal found; it could not be independently confirmed whether SeaCloudAI/sandbox-gateway is operated by the same legal entity as the consumer app vs. a separate internal team/product line. No funding round, investor, valuation, or revenue figure for SeaArt / SunriseAI / SeaCloudAI could be found via GitHub, PyPI, the company site, TechCrunch search, Bing search/news, Crunchbase (blocked with 403), or Tracxn (404). Treat funding/revenue as genuinely unknown rather than bootstrapped-by-default; this reflects an evidence gap, not a confirmed bootstrapped status."
 },
 "id": "seacloudai",
 "name": "SeaCloudAI Sandbox",
 "url": "https://sandbox-gateway.cloud.seaart.ai",
 "category": "agent-sandbox",
 "isolation": "container",
 "modes": [
  {
   "key": "on-demand",
   "label": "On-demand",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": null
   },
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Public rate not established",
   "fee": null,
   "flags": [],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": null,
  "sso": false,
  "gpu_types": [],
  "regions": [],
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "isolation": "container",
  "image_oci": true,
  "snapshot_on_demand": false,
  "harness_api": false,
  "egress_allowlist_level": "ip",
  "ingress_rules": true,
  "volume_attach": true,
  "anti_bot": false,
  "captcha_solving": false,
  "snapshot_auto": false,
  "volume_shared": true,
  "own_agent_api": false,
  "secret_proxy": false,
  "egress_ip_type": "datacenter",
  "guest_firewall": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Published SDK supplies SeaArt-hosted control/build/runtime endpoint. No public dollar tariff established; SDK distribution alone is not a proof of ungated signup.",
  "Not fully priceable in ENGINE_CARD: unknown USD resource rates or machine shape. Null is not zero; do not rank as a free provider.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free."
 ],
 "sources": [
  "https://pypi.org/project/seacloudai-sandbox/",
  "https://github.com/SeaCloudAI/sandbox-python"
 ],
 "audit_2026_09_29": {
  "applied": 8,
  "source": "checked against the provider's live pricing and docs pages"
 },
 "feature_evidence": {
  "snapshot_on_demand": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/README.md",
   "quote": "Snapshot APIs are not exposed yet because the underlying platform does not support them.",
   "note": "Same sentence in the Go and Node SDK READMEs. Only pause/resume and custom template builds.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/README.md",
   "quote": null,
   "note": "Official 'claude' / 'codex' templates only have 'the CLIs preinstalled' (agent_harnesses); SDKs and CLI expose lifecycle, files, commands, PTY, git, code interpreter, templates only. No API to prompt/stream/resume an in-sandbox agent. The seacloud CLI's 'llm run' calls hosted models, not an in-sandbox harness.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://github.com/SeaCloudAI/sandbox-go/blob/v0.3.4/control/types.go",
   "quote": "AllowInternetAccess=false enables egress isolation. AllowOut and DenyOut accept IPv4 CIDR ranges or single IPv4 addresses",
   "note": "Per-sandbox SandboxNetworkPolicy at create or via PUT /api/v1/sandboxes/{id}/network (seacloud CLI 'sandbox network update --allow-internet-access=false --allow-out 1.1.1.1 --deny-out 10.0.0.0/8'). IPv4/CIDR only, no domains. Enforcement point not documented. The Python SDK 0.3.2 still rejects 'network' / 'allow_internet_access' on create ('is not supported'); the Go SDK v0.3.4 and CLI expose it.",
   "checked": "2026-09-29",
   "level": "ip"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://github.com/SeaCloudAI/seacloud-cli/blob/HEAD/cmd/sandbox.go",
   "quote": "Network policy can control public inbound traffic, internet egress, and explicit\negress allow/deny CIDR lists.",
   "note": "allowPublicTraffic flag on the network policy; get_host(port) gives a proxy URL derived from envdUrl, with a sandbox-scoped traffic_access_token (E2B-style). No IP allowlist documented.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://github.com/SeaCloudAI/seacloud-cli/blob/HEAD/cmd/sandbox.go",
   "quote": "Volumes are durable storage resources that can be mounted during sandbox create\nwith --volume-mount name:/path.",
   "note": "Named volumes (POST /api/v1/volumes) mounted at create via volumeMounts name:path. Template volumeMounts also support NFS host paths, block volumes (storageClass/storageSizeGB), PVCs and object-bucket mounts with readOnly flag. Sizes/prices unpublished.",
   "checked": "2026-09-29"
  },
  "nested_virt": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside the product's scope; a code/agent-execution sandbox gateway with no mention of /dev/kvm or nested virtualization.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "The SDK gives you a simple E2B-style workflow for sandbox lifecycle, files, commands, PTY, code execution, service proxying, and reusable template builds.",
   "note": "not offered: outside the product's scope; no VNC/RDP/stream desktop surface documented anywhere in the SDKs or CLI.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Official templates for fast starts: use base for files, commands, git, and PTY; use code-interpreter for multi-language code execution; use agent templates such as claude or codex",
   "note": "not offered: outside the product's scope; no managed/real browser template or API documented.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside the product's scope; there is no desktop, so no screenshot+click driving API exists.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside the product's scope; a headless code/agent sandbox with no browser product, so no stealth/fingerprinting feature exists.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside the product's scope; no browser/CAPTCHA feature documented.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "seacloud sandbox connect <sandbox_id> --shell bash",
   "note": "Interactive access is via the sandbox gateway's own command/PTY runtime protocol and access-token proxy (get_host/traffic_access_token), not a real SSH server/port. No SSH mentioned anywhere in the SDKs or CLI.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/README.md",
   "quote": "Snapshot APIs are not exposed yet because the underlying platform does not support them.",
   "note": "Same statement repeated in Go/Node SDK READMEs. Only pause/resume (not full snapshot/restore) and template builds are supported.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/README.md",
   "quote": "Snapshot APIs are not exposed yet because the underlying platform does not support them.",
   "note": "No snapshot capability exists at all, so there is no automatic state save/restore on stop/sleep.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Main Entrypoints - Sandbox.create(...), Sandbox.connect(...), Sandbox.list(...): create and manage sandboxes.",
   "note": "No clone/fork-a-sandbox API documented; only create-from-template, connect, list, pause/resume, delete.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Main Entrypoints - Sandbox.create(...), Sandbox.connect(...), Sandbox.list(...): create and manage sandboxes.",
   "note": "derived: no fork feature exists at all, so cloning a running machine is not offered.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/README.md",
   "quote": "Snapshot APIs are not exposed yet because the underlying platform does not support them.",
   "note": "No snapshot or fork capability exists, so memory-preserving clones are not possible.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/cmd/sandbox.go",
   "quote": "sandboxCreateCmd.Flags().BoolVar(&sandboxCreateOpts.autoResume, \"auto-resume\", false, \"Allow router-triggered auto resume\")",
   "note": "The 'auto-resume' create flag and pause command note ('Pause a sandbox so it can be resumed later when auto-resume routing is enabled') describe the gateway router auto-resuming a paused sandbox when a request arrives.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": true,
   "source": "https://github.com/SeaCloudAI/seacloud-cli/blob/HEAD/cmd/sandbox.go",
   "quote": "Volumes are durable storage resources that can be mounted during sandbox create\nwith --volume-mount name:/path.",
   "note": "Named volumes are created independently of any one sandbox (seacloud sandbox volume create) and mounted by name into any sandbox via --volume-mount, implying the same volume can be mounted by multiple sandboxes; not explicitly confirmed for concurrent mounts.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/cmd/sandbox.go",
   "quote": "sandboxCreateCmd.Flags().BoolVar(&sandboxCreateOpts.autoPause, \"auto-pause\", false, \"Pause instead of kill on timeout\")",
   "note": "auto-pause pauses (rather than deletes) a sandbox when its lifecycle timeout elapses; this is timeout-based rather than activity-based idle detection, so evidence is indirect.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-go/blob/v0.3.4/control/types.go",
   "quote": "CPUCount int32 `json:\"cpuCount\"` MemoryMB int32 `json:\"memoryMB\"`",
   "note": "CPU/RAM are fixed fields on the sandbox detail set at creation/template build; no API to change them on a running sandbox is documented (only SetTimeout for the lifecycle timeout).",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "seacloud llm run claude-opus-4-6 --param messages='[{\"role\":\"user\",\"content\":\"hello\"}]'",
   "note": "not offered: outside the product's scope; 'seacloud llm run'/'seacloud run' call hosted third-party generative models (LLM/image/video), not a first-party browser/computer-use/research task agent that drives the sandbox itself.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "intentionally not exposed yet: MCP server helpers and devcontainer helpers",
   "note": "Same line appears in the Python and Go SDK READMEs' template helper lists.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Use sandbox.get_host(port) when you start an HTTP service and want a public proxy URL.",
   "note": "Inbound access is exposed only via a proxy URL derived from envdUrl/traffic_access_token (E2B-style), not a routable public IPv4 address assigned to the machine.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-go/blob/v0.3.4/control/types.go",
   "quote": "AllowOut and DenyOut accept IPv4 CIDR ranges or single IPv4 addresses; single IPs are normalized by the control plane to /32.",
   "note": "Egress control is IP/CIDR-level only (no domain or HTTP method/path level rules documented).",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "sandbox.files.write(...) result = sandbox.commands.run(\"sh\", args=[...]) ... export SEACLOUD_API_KEY=...",
   "note": "No first-party credential-injection HTTP proxy is documented; env vars (envVars on create) are the only documented way to pass secrets into a sandbox.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside the product's scope; a code/agent sandbox product with no GPU machine type mentioned in SDKs, CLI, or template build options (only cpu-count/memory-mb).",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "Prebuilt binaries are published on the Releases page for: macOS amd64, macOS arm64, Linux amd64, Linux arm64, Windows amd64",
   "note": "Windows/macOS binaries are the CLI tool for the operator's own machine; the sandbox guest OS itself is Linux-only per official templates (base, code-interpreter, claude, codex all run Linux commands like uname -a, apt_install).",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "Prebuilt binaries are published on the Releases page for: macOS amd64, macOS arm64, Linux amd64, Linux arm64, Windows amd64",
   "note": "not offered: outside the product's scope; sandbox guest machines are Linux containers/VMs (apt_install, Dockerfile-style base images), no macOS guest option documented.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "The SeaCloudAI production gateway is currently hosted under the seaart.ai domain.",
   "note": "SDKs/CLI target a hosted SeaCloudAI gateway (with a dev override URL for SeaCloudAI's own environments); no self-hosted/on-prem deployment of the sandbox platform itself is offered to customers.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "The SeaCloudAI production gateway is currently hosted under the seaart.ai domain.",
   "note": "not offered: outside the product's scope; only SeaCloudAI's own hosted gateway is documented, no bring-your-own-cloud deployment option.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://github.com/SeaCloudAI/sandbox-python/blob/HEAD/LICENSE",
   "quote": "MIT License Copyright (c) 2026 SeaCloudAI",
   "note": "Only the client SDKs (Python/Go/Node) and CLI are MIT-licensed open source; the sandbox execution platform/gateway itself is closed-source and hosted by SeaCloudAI, so the core product is not open source.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "seacloud auth login seacloud auth status seacloud auth set-key <api-key>",
   "note": "Documented auth is a browser-based device-flow login and API keys only; no SAML/OIDC SSO option is documented anywhere.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "The SDK validates the archive size before upload and sends the required GCS content-length-range header.",
   "note": "derived: build-context uploads go through a GCS (Google Cloud Storage) content-length-range header and the template builder offers from_gcp_registry/from_aws_registry, indicating standard hyperscaler-cloud infrastructure. No residential, mobile, or dedicated/static egress IP feature is documented anywhere in the SDKs or CLI; outbound traffic is only controllable via AllowOut/DenyOut CIDR lists, not IP type.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-go/HEAD/README.md",
   "quote": "Snapshot APIs are not exposed yet because the underlying platform does not support them.",
   "note": "derived: there is no documented 'stop' lifecycle distinct from pause/kill/delete. pause()/resume() keep an existing sandbox suspended (billing-relevant, not disk persistence across a stop/start cycle), and disk/filesystem snapshotting is explicitly stated as unsupported by the platform, so files are not documented to survive a full stop/start.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "sandbox.files.write(\"/root/workspace/hello.txt\", \"hello from SeaCloudAI\\n\")",
   "note": "derived: default examples operate as root (writes under /root/workspace, uname -a via plain sh -lc with no sudo), consistent with full guest OS/root access. Per card convention, root-capable guests are assumed to allow nftables/iptables to function inside, though this is not separately documented.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/cmd/sandbox.go",
   "quote": "Egress allowlist IPv4/CIDR, repeatable or comma-separated",
   "note": "The only outbound-IP-related feature documented is a per-sandbox allow/deny CIDR list controlling which destinations a sandbox may reach (egress_allowlist); no SDK/CLI field or doc offers a fixed/dedicated outbound IP address for a sandbox.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/cmd/sandbox.go",
   "quote": "SEACLOUD_BASE_URL: required full gateway API root",
   "note": "derived: there is no --region flag or region parameter anywhere in the CLI, SDKs, or API types; sandbox creation only targets a single configured gateway base URL (production example: sandbox-gateway.cloud.seaart.ai). No region/data-residency selection is documented, so EU residency cannot be offered as a controllable feature.",
   "checked": "2026-09-30"
  },
  "isolation": {
   "value": "container",
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Each mount declares its own storage through volumeMounts[i].storageType plus the matching storage fields such as nfsHostPath, storageClass/storageSizeGB, persistentVolumeClaim, or objectBucket.",
   "note": "derived: template/build fields use Kubernetes-native primitives (storageClass, persistentVolumeClaim), and the README distinguishes sandboxes that 'keep the managed runtime' vs. 'direct external images [that] run as plain business containers', indicating a container/pod-based backend. No microVM/VM hypervisor technology (Firecracker, Kata, QEMU, Hyper-V) is documented anywhere in the SDKs, CLI, or build types.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Run code, agent workflows, and lightweight services in isolated cloud sandboxes from Python.",
   "note": "not offered: outside documented scope; no docker-in-docker, privileged mode, or /var/run/docker.sock passthrough is mentioned anywhere in the SDKs/CLI, and the platform's own container/pod-based isolation (see isolation field) plus nested_virt=false in the card make nested Docker unlikely without an undocumented privileged mode.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/seacloud-cli/HEAD/README.md",
   "quote": "Prebuilt binaries are published on the Releases page for: macOS amd64, macOS arm64, Linux amd64, Linux arm64, Windows amd64",
   "note": "not offered: outside the product's scope; the listed arm64 builds are the seacloud CLI binary for the operator's own workstation, not a guest sandbox architecture option. No arm64/aarch64 sandbox instance type, template base image, or build architecture flag is documented in the SDKs, CLI, or Template build DSL (from_node_image/from_python_image/from_ubuntu_image/etc. show no arch parameter).",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": 24,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
   "quote": "Sandbox lifecycle timeout is validated to `0..86400` seconds; refresh duration to `0..3600` seconds.",
   "note": "86400 seconds = 24 hours is the maximum lifecycle `timeout` a sandbox can be created/set with in one call (set_timeout/refresh caps each renewal at up to 3600s); identical validation text repeats in the Go and Node SDK READMEs. Whether repeated refresh calls before expiry can extend a running sandbox indefinitely is not documented, so 24h is reported as the maximum for a single timeout window.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-go/HEAD/README.md",
   "quote": "Control-plane metrics: get_sandbox_metrics, list_sandbox_metrics (return load1, memoryUsagePercent, diskReadOpsPerSecond, networkRecvBytesPerSecond); Runtime metrics: get_metrics() returns cpu_used_pct, mem_used_mib, disk_used, net_rx_bytes. Use get_observability_summary() for user/Project-level usa",
   "note": "granularity: account-only; cost: no; SeaCloudAI exposes three metric surfaces: (1) control-plane monitoring (live CPU/memory/disk/network rates), (2) runtime monitoring (in-sandbox CPU%, memory, disk snapshots), (3) observability summary with quota/limits at user/project level only. None return billable usage (running time in seconds, vCPU-seconds, GB-seconds). No per-sandbox cost or cumulative billing API is documented in any SDK (Python, Go, Node) or the public gateway API. The 'sandboxUsage' and 'templateUsage' endpoint hints in ObservabilityEndpointHints refer to quota limits, not billable charges. Sandbox pricing uses 'resource' model but no public rates are established (card: 'Public rate not established').",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://raw.githubusercontent.com/SeaCloudAI/sandbox-python/HEAD/README.md",
 "locations_quote": "The SeaCloudAI production gateway is currently hosted under the `seaart.ai` domain.",
 "locations_checked": "2026-10-01"
}