{ "features_resolved": { "snapshot_any": true, "snapshot_mem": false, "fork": true, "pause_resume": true, "persistent_disk": true, "whole_disk": true, "persist_scope": null, "volumes": true, "auto_stop_idle": false, "long_sessions": true, "custom_image": true, "image_snapshot": true, "image_oci": true, "vm_isolation": true, "docker_inside": true, "nested_virt": true, "root": true, "systemd": null, "browser": false, "desktop": true, "computer_use": false, "code_interpreter": false, "browser_control": null, "desktop_control": null, "browser_and_desktop": false, "anti_bot": false, "captcha_solving": false, "residential_ip": false, "agent_harnesses": false, "ssh": true, "public_ipv4": false, "inbound_https": false, "custom_domain": null, "raw_tcp_inbound": null, "egress_allowlist": true, "open_internet": null, "static_egress_ip": false, "private_network": null, "self_host": true, "byoc": true, "open_source": true, "soc2": false, "hipaa": false, "sso": false, "gpu": false, "arm64": true, "windows": false, "macos": true, "lang_python": false, "lang_node": false, "lang_go": null, "lang_rust": null, "lang_java": null, "gpu_desktop": false, "credential_injection": null, "egress_http_rules": false, "wake_on_request": false, "live_resize": false, "fork_running": true, "memory_snapshot_fork": false, "webhooks": false, "scheduled_wakeups": null, "audit_logs": null, "eu_data_residency": false, "zero_data_retention": null, "scoped_api_keys": null, "spend_limits": null, "mcp_server": false, "usage_api": false, "snapshot_auto": true, "snapshot_on_demand": true, "harness_api": false, "own_agent_api": false, "fast_boot": null, "strong_isolation": true, "ingress_rules": true, "guest_firewall": true, "secret_proxy": false, "secret_proxy_any": false, "volume_attach": true, "volume_shared": true, "sidecar": null, "fuse": true, "kernel_features": true, "burst": null }, "company": { "id": "tart-orchard", "checked": "2026-09-30", "company": "Cirrus Labs, Inc. (Tart / Orchard; now part of OpenAI)", "ownership": { "value": "acquired", "parent": "OpenAI", "source": "https://cirruslabs.org/", "quote": "This is why when the opportunity arose for us to join OpenAI, it was an easy yes, and I'm happy to announce today that we've entered into an agreement to join OpenAI as part of the Agent Infrastructure team." }, "stage": { "value": "bootstrapped", "source": "https://cirruslabs.org/", "quote": "We never raised outside capital. That let us stay patient, stay close to the problems, and put a great deal of care into the products we built.", "confidence": "high", "note": "Cirrus Labs was bootstrapped/profitable since founding in 2017 and never took outside investment; in April 2026 it entered an acqui-hire style agreement to join OpenAI (an asset/team deal, not a priced equity round), so stage is recorded as the pre-acquisition funding history (bootstrapped) with ownership marked acquired/subsidiary-of-OpenAI." }, "accelerators": [], "total_funding_usd": { "value": 0, "status": "confirmed", "basis": "Founder statement that the company never raised outside capital", "source": "https://cirruslabs.org/", "quote": "We never raised outside capital." }, "last_round": { "type": "acqui-hire / team-and-technology agreement", "amount_usd": null, "date": "2026-04-07", "leads": [ "OpenAI" ], "status": "confirmed", "source": "https://cirruslabs.org/", "quote": "Official announcement April 7th, 2026: Cirrus Labs to join OpenAI ... we've entered into an agreement to join OpenAI as part of the Agent Infrastructure team." }, "investors": [], "portfolio_listings": [], "revenue": { "value": null, "status": "unknown" }, "employees": { "value": null, "source": "" }, "note": "Cirrus Labs (founded 2017 by Fedor Korotkov, bootstrapped, never raised outside capital) builds Tart (Apple Virtualization.framework VM manager) and Orchard (orchestrator). On 2026-04-07 Cirrus Labs agreed to join OpenAI's Agent Infrastructure team. As a result: Cirrus CI (its SaaS CI/CD product) shut down 2026-06-01; Cirrus Runners stopped accepting new customers; Tart/Vetu/Orchard were relicensed under the more permissive FSL-1.1-ALv2 and all paid licensing fees for them were dropped (now free for internal use, no core/worker caps). The tart.run/licensing page still shows stale paid tiers (Gold/Platinum/Diamond) from before the change. Project development continues under github.com/openai/tart. Buyers should treat this purely as a free, OpenAI-maintained open/source-available self-hosted tool rather than a paid vendor with its own funding trajectory going forward." }, "id": "tart-orchard", "name": "Tart + Orchard (Cirrus Labs)", "url": "https://tart.run/licensing/", "category": "macos", "isolation": "apple-vm", "modes": [ { "key": "self-hosted", "label": "Self-hosted licence on your own Macs (compute not included)", "flags": [ "alt" ], "os": [ "macos", "linux" ], "gpu_only": false, "features": {}, "pricing": "resource", "vcpu_h": 0, "ram_gib_h": 0, "cpu_basis": "alloc", "ram_basis": "alloc", "active_floor": 0, "ram_per_vcpu": [ null, null ], "ram_fixed_per_vcpu": null, "vcpu_options": null, "min_vcpu": null, "max_vcpu": null, "max_ram_gib": null, "sizes": null, "pool_tiers": null, "requires_always_on": false, "always_on_month_per_instance": null, "commit_note": null, "min_billed_seconds": 0, "granularity_s": 1, "start_fee": 0, "boot_overhead_s": null, "multiplier": 1, "windows_vcpu_h": null, "gpu": null, "note": "Software licence only: Tart (Apple Virtualization.framework VM manager) + Orchard orchestrator. You bring and pay for the Macs (e.g. Scaleway / MacStadium / AWS EC2 Mac). vcpu_h/ram_gib_h = 0 means \"no compute charge from Tart\", not free compute. All P+E host cores count toward the licence.", "regions": null } ], "storage": { "included_disk_gib": null, "disk_gib_month": null, "disk_billed_when_stopped": false, "snapshot_gib_month": null, "paused_ram_billed": false }, "network": { "egress_free_gib": null, "egress_gib": null, "ipv4_month": null, "ipv4_available": false }, "plans": [ { "name": "Free Tier", "fee": 0, "flags": [], "fee_is_credit": false, "included_usd": 0, "per_seat": 0, "concurrency": null, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "Current Tart/Orchard releases are under FSL-1.1-ALv2 (relicensed 2026-06-05, copyright OpenAI): free for any internal use with no core/worker caps; prohibited only for a 'Competing Use' (offering it in a commercial product/service that substitutes for the Software). Each release converts to Apache-2.0 two years after it is made available. tart.run/licensing still prints the old 100-core / 4-worker Fair Source tiers (stale page). Older releases (pre-June 2026) remain under the Fair Source licence text.", "max_host_cores": null, "max_orchard_workers": null }, { "name": "Gold", "fee": 1000, "flags": [ "sales", "legacy" ], "fee_is_credit": false, "included_usd": 0, "per_seat": 0, "concurrency": null, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "$12,000 per year; 500 cores / 20 Orchard workers; priority support. Bought via licensing@cirruslabs.org. LEGACY: Cirrus Labs \"stopped charging licensing fees\" for Tart/Orchard after agreeing to join OpenAI (cirruslabs.org, 2026-04-07); tart.run/licensing still lists the tier.", "max_host_cores": 500, "max_orchard_workers": 20 }, { "name": "Platinum", "fee": 3000, "flags": [ "sales", "legacy" ], "fee_is_credit": false, "included_usd": 0, "per_seat": 0, "concurrency": null, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "$36,000 per year; 3,000 cores / 200 Orchard workers. LEGACY: Cirrus Labs \"stopped charging licensing fees\" for Tart/Orchard after agreeing to join OpenAI (cirruslabs.org, 2026-04-07); tart.run/licensing still lists the tier.", "max_host_cores": 3000, "max_orchard_workers": 200 }, { "name": "Diamond", "fee": null, "flags": [ "sales", "legacy" ], "fee_is_credit": false, "included_usd": 0, "per_seat": 0, "concurrency": null, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "$12 per CPU core per year, unlimited Orchard workers. LEGACY: Cirrus Labs \"stopped charging licensing fees\" for Tart/Orchard after agreeing to join OpenAI (cirruslabs.org, 2026-04-07); tart.run/licensing still lists the tier.", "max_host_cores": null, "max_orchard_workers": null } ], "free": { "monthly_credit": 0, "one_time_credit": 0 }, "features": { "linux": true, "windows": false, "macos": true, "arm64": true, "gpu": false, "gpu_types": [], "snapshot": "fs", "pause_resume": true, "fork": true, "persistent_disk": true, "volumes": null, "auto_stop_idle": false, "max_session_h": null, "custom_image": true, "docker_inside": true, "nested_virt": true, "root": true, "systemd": null, "browser": false, "desktop": true, "computer_use": false, "code_interpreter": false, "agent_harnesses": false, "ssh": true, "public_ipv4": false, "inbound_https": false, "custom_domain": null, "raw_tcp_inbound": null, "egress_allowlist": true, "static_egress_ip": false, "private_network": null, "self_host": true, "byoc": true, "open_source": true, "regions": null, "soc2": false, "hipaa": false, "sso": false, "lang_python": false, "lang_node": false, "lang_go": null, "lang_rust": null, "lang_java": null, "gpu_desktop": false, "credential_injection": null, "egress_http_rules": false, "wake_on_request": false, "live_resize": false, "fork_running": true, "memory_snapshot_fork": false, "webhooks": false, "scheduled_wakeups": null, "audit_logs": null, "eu_data_residency": false, "zero_data_retention": null, "scoped_api_keys": null, "spend_limits": null, "mcp_server": false, "snapshot_auto": true, "snapshot_on_demand": true, "harness_api": false, "egress_allowlist_level": "ip", "ingress_rules": true, "guest_firewall": true, "secret_proxy": false, "volume_attach": true, "isolation": "apple-vm", "image_oci": true, "anti_bot": false, "captcha_solving": false, "egress_ip_type": "datacenter", "volume_shared": true, "own_agent_api": false, "max_session_unlimited": true, "usage_api": false }, "perf": { "cpu_runs_s": null, "cold_start_ms": null, "burst_tti_ms": null, "dax_s": null }, "knobs": [], "caveats": [ "Not a hosted service: the engine must add the cost of the Macs you run it on. Plan fees are yearly licences shown as /12.", "Licence is FSL-1.1-ALv2 (Functional Source License, source-available; each release becomes Apache-2.0 after 2 years). open_source true in the loose sense. Competing Use (reselling it as a substitute commercial product/service) is not permitted.", "Examples inside the Free Tier: 12 Mac minis x 8 cores running up to 24 VMs; 13 Mac minis exceed it.", "Status (verified 2026-09-28, cirruslabs.org): Cirrus Labs agreed to join OpenAI (2026-04-07); Cirrus CI shut down 2026-06-01; Cirrus Runners closed to new customers; Tart/Vetu/Orchard to be relicensed under a more permissive licence and \"we have also stopped charging licensing fees\". Paid tiers flagged legacy. The software itself is not discontinued, so the self-hosted regime is not flagged legacy; future maintenance is uncertain.", "Apple macOS SLA: leasing a Mac requires a minimum lease of 24 consecutive hours with sole use by the lessee, and allows at most 2 additional macOS VMs per Mac.", "Software licence only: you supply and pay for the Mac hardware, so the estimate excludes compute.", "Never has a compute price: no_price_reason \"software licence only - bring your own Macs\" (needs engine support to surface instead of the generic \"no usable compute price\").", "Project is actively maintained under OpenAI's GitHub org (github.com/openai/tart; releases 2.38.0-2.40.0 on 2026-09-24..28)." ], "sources": [ "https://tart.run/licensing/", "https://tart.run/", "https://www.oakhost.com/blog/migrating-from-cirrus-runner", "https://cirruslabs.org/", "https://github.com/openai/tart" ], "no_price_reason": "software licence only - bring your own Macs", "fleet": { "default_max_instances": null, "default_max_vcpu": null, "default_max_gpus": null, "raise": "sales", "raise_time_days": null, "verification": null, "tiers": "No licence tiers for current releases (FSL-1.1-ALv2, no core/worker caps for internal use). Fleet size bounded only by your Mac hardware and Apple's 2-extra-macOS-VMs-per-Mac SLA.", "notes": "Self-hosted software, not provisioned compute. Host-core/worker licence restrictions must not be encoded as guest VM or vCPU quota; fleet also requires owned/rented Apple hardware.", "sources": [ "https://tart.run/licensing/" ], "researched": "2026-09-28" }, "audit_2026_09_29": { "applied": 5, "source": "checked against the provider's live pricing and docs pages", "reviewed": 2 }, "feature_evidence": { "snapshot_auto": { "value": true, "source": "https://github.com/openai/orchard/blob/main/internal/command/create/vm.go", "quote": "treat the VM as suspendable, disabling certain devices for suspendability support and issuing \"tart suspend\" instead of \"tart stop\" when VM's specification is updated, thus preserving the VM's state between specification generations", "note": "Narrow: Orchard VMs created with --suspendable are suspended (memory + disk state saved via Virtualization.framework saveMachineStateTo) instead of stopped when their spec is updated, then restored. In plain Tart, closing the GUI window of a --suspendable VM also suspends it. No idle/time-limit auto-snapshot. Suspend works only for macOS guests on macOS 14+ hosts.", "checked": "2026-09-29" }, "snapshot_on_demand": { "value": true, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Clone.swift", "quote": "Creates a local virtual machine by cloning either a remote or another local virtual machine.", "note": "Disk-level: tart clone (APFS copy-on-write) of a local VM, or tart push to an OCI registry, then boot new VMs from it (fork/template). Memory-level: 'tart suspend' (Suspend.swift abstract: 'Suspend a VM'; Run.swift: 'Useful for running a VM that can be suspended via \"tart suspend\"') saves the running macOS VM's state, restored on next tart run; macOS guests only. Clone.swift has handling for cloning a Suspended source VM, but cloning with memory state is not documented.", "checked": "2026-09-29" }, "harness_api": { "value": false, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Exec.swift", "quote": "Execute a command in a running VM", "note": "Only generic control: tart exec (guest agent), SSH/VNC, Orchard REST API with startup scripts, exec, events/logs. No agent-harness API.", "checked": "2026-09-29" }, "egress_allowlist": { "value": true, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Run.swift", "quote": "For example --net-softnet-block=0.0.0.0/0 may be used to establish a default deny policy that is further relaxed with --net-softnet-allow.", "note": "Softnet: host-side userspace packet filter (outside the VM) with CIDR allow/block lists (--net-softnet-allow / --net-softnet-block); by default blocks private ranges and allows globally routable IPv4. Lists can be replaced live via --net-softnet-control-fd. Orchard exposes the same flags per VM (orchard create vm --net-softnet-allow/--net-softnet-block). IPv4 CIDRs only, no hostnames.", "checked": "2026-09-29", "level": "ip" }, "egress_http_rules": { "value": false, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Run.swift", "quote": "It is essentially a userspace packet filter which restricts the VM networking and prevents a class of security issues, such as ARP spoofing.", "note": "Packet/CIDR-level only; no HTTP-level rules.", "checked": "2026-09-29" }, "ingress_rules": { "value": true, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Run.swift", "quote": "Comma-separated list of TCP ports to expose (e.g. --net-softnet-expose 2222:22,8080:80)", "note": "You choose which guest TCP ports are forwarded from the host interface (Softnet restrictions still apply); default NAT networking is not reachable from outside the host. Orchard: 'orchard port-forward vm' forwards a TCP port through the controller, which requires service-account auth (basic auth in non-dev mode). Note Softnet default says the VM will 'receive any incoming traffic' on its bridge.", "checked": "2026-09-29" }, "guest_firewall": { "value": true, "source": null, "quote": null, "note": "Full Apple Virtualization.framework VM (macOS or Linux guest) with its own kernel and admin/root access; iptables/nftables (Linux) or pf (macOS) should work.", "checked": "2026-09-29", "derived": true }, "secret_proxy": { "value": false, "source": "https://tart.run/faq/", "quote": "This is because Tart uses Keychain to store and retrieve OCI registry credentials by default ... Alternatively, you can pass the credentials via the environment variables", "note": "Only local Keychain storage or env vars for registry credentials are documented; no HTTP-credential-injecting proxy for arbitrary APIs exists.", "checked": "2026-09-30" }, "volume_attach": { "value": true, "source": "https://github.com/openai/tart/blob/main/Sources/tart/Commands/Run.swift", "quote": "Additional disk attachments with an optional read-only and synchronization options in the form of path[:options] (e.g. --disk=\"disk.bin\", --disk=\"ubuntu.iso:ro\", --disk=\"/dev/disk0\", --disk \"ghcr.io/cirruslabs/xcode:16.0:ro\" or --disk=\"nbd://localhost:10809/myDisk:sync=none\")", "note": "Extra disks: image files, host block devices, NBD URLs (network block device), OCI disk images (ro). Also --dir virtiofs host directory shares (rw or ro); Orchard --host-dirs mounts worker-host directories into VMs. You provide the storage (self-hosted).", "checked": "2026-09-29" }, "isolation": { "value": "apple-vm", "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart uses Apple's own Virtualization.Framework for near-native performance.", "note": "Full macOS/Linux VM via Apple's Virtualization.framework, matching the card's top-level isolation classification.", "checked": "2026-09-30" }, "image_oci": { "value": true, "source": "https://tart.run/quick-start/", "quote": "Tart supports interacting with Open Container Initiative (OCI) registries, but only runs images created and pushed by Tart. This means images created for container engines, like Docker, can't be pulled. Instead, create a custom image as documented above.", "note": "You build/customize your own VM disk image (macOS from IPSW or Linux distro) and push/pull it via any OCI-compatible registry (ghcr.io etc.) to start machines from it; the image format is Tart's own, not a generic Docker image.", "checked": "2026-09-30" }, "docker_inside": { "value": true, "source": "https://tart.run/quick-start/", "quote": "Ubuntu ghcr.io/cirruslabs/ubuntu:latest ... These credentials work both for logging in via GUI, console (Linux) and SSH.", "note": "Full root/SSH access inside Linux (and macOS) guest VMs; Docker Engine/containerd runs normally inside a Linux guest without needing hardware nested virtualization. Docker Desktop-style container tooling on a macOS guest would additionally need nested virtualization support, which Tart limits to M3/M4 hosts on macOS 15+ for Linux VMs only (per FAQ).", "checked": "2026-09-30" }, "browser": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope. Tart/Orchard is generic VM tooling; it does not ship or manage a browser for agent use (any browser present would only be whatever you install in your own custom image).", "checked": "2026-09-30" }, "anti_bot": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope.", "checked": "2026-09-30" }, "captcha_solving": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope.", "checked": "2026-09-30" }, "egress_ip_type": { "value": "datacenter", "source": "https://tart.run/licensing/", "quote": "Software licence only: Tart (Apple Virtualization.framework VM manager) + Orchard orchestrator. You bring and pay for the Macs (e.g. Scaleway / MacStadium / AWS EC2 Mac).", "note": "Self-hosted: outbound IP is whatever network the operator's own Mac hardware sits on. Typical deployments cited by the vendor (MacStadium, Scaleway Apple silicon, AWS EC2 Mac) are datacenter-hosted, so egress is normally datacenter-class IP, not something Tart itself assigns.", "checked": "2026-09-30" }, "pause_resume": { "value": true, "source": "https://raw.githubusercontent.com/openai/tart/main/Sources/tart/Commands/Suspend.swift", "quote": "Suspend a VM ... Tell the \"tart run\" process to suspend the VM", "note": "tart suspend saves running-VM state (memory+disk) via SIGUSR1 to the tart run process; tart run on the same VM afterwards resumes it. macOS guests only, macOS 14+ hosts. Self-hosted so no billing dimension, but the pause/resume mechanic itself exists.", "checked": "2026-09-30" }, "wake_on_request": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Try running a Tart VM on your Apple Silicon device ... tart run tahoe-base", "note": "not offered: outside the product's scope. Starting/waking a VM is always an explicit `tart run` / Orchard API call from the operator; there is no request-triggered auto-wake of a sleeping VM.", "checked": "2026-09-30" }, "volume_shared": { "value": true, "source": "https://tart.run/quick-start/", "quote": "To mount a directory, run the VM with the --dir argument: tart run --dir=project:~/src/project vm", "note": "--dir shares an arbitrary host directory into a VM via virtiofs; nothing prevents starting several VMs each pointing --dir at the same host path, giving several running machines concurrent access to one shared directory. Orchard's --host-dirs offers the analogous per-worker-host directory sharing.", "checked": "2026-09-30" }, "live_resize": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/Sources/tart/Commands/Set.swift", "quote": "Modify VM's configuration ... Number of VM CPUs ... VM memory size in megabytes", "note": "`tart set --cpu/--memory` rewrites the VM's stored config file; the new values take effect on the VM's next boot, not on a currently running VM. No documented API to change CPU/RAM of a live running VM in place.", "checked": "2026-09-30" }, "own_agent_api": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope. No first-party browser/computer-use/research task-agent API; only generic VM control (exec, SSH, Orchard REST API for VM lifecycle).", "checked": "2026-09-30" }, "mcp_server": { "value": false, "source": "https://github.com/openai?q=tart&type=all", "quote": "orchard, softnet, tart, tart-guest-agent", "note": "No MCP server repository or docs found under the project's GitHub org (openai/tart, openai/orchard, openai/softnet, openai/tart-guest-agent); only CLI/REST control surfaces exist.", "checked": "2026-09-30" }, "lang_python": { "value": false, "source": "https://tart.run/quick-start/", "quote": "Tart supports macOS and Linux virtual machines. ... The only difference is how such VM images are created.", "note": "not offered: outside the product's scope. Base Tart VM images (vanilla macOS IPSW install, or bare Linux cloud images) carry no first-party guaranteed Python runtime; whatever runtime exists is whatever the operator installs into their own custom image.", "checked": "2026-09-30" }, "lang_node": { "value": false, "source": "https://tart.run/quick-start/", "quote": "Tart supports macOS and Linux virtual machines. ... The only difference is how such VM images are created.", "note": "not offered: outside the product's scope, as with Python. (A separate, optional community-maintained image template repo, cirruslabs/macos-image-templates, does brew-install Node.js into its own 'base' image, but that is not a runtime the core Tart/Orchard product provides out of the box.)", "checked": "2026-09-30" }, "public_ipv4": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/Sources/tart/Commands/Run.swift", "quote": "Use bridged networking instead of the default shared (NAT) networking (e.g. --net-bridged=en0 or --net-bridged=\"Wi-Fi\")", "note": "Default networking is NAT (private VM IP behind the host). Optional --net-bridged puts the VM on the host's LAN with a DHCP-leased address, but Tart itself does not allocate/assign a distinct public IPv4 per VM.", "checked": "2026-09-30" }, "soc2": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope. Self-hosted, source-available software with no hosted service, so no vendor compliance attestation applies.", "checked": "2026-09-30" }, "hipaa": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope. Self-hosted software; no hosted service or BAA program.", "checked": "2026-09-30" }, "sso": { "value": false, "source": "https://raw.githubusercontent.com/openai/orchard/main/README.md", "quote": "Orchard is an orchestration system for Tart. Create a cluster of bare-metal Apple Silicon machines and manage dozens of VMs with ease!", "note": "not offered: outside the product's scope. Orchard auth is service-account basic auth for its controller API, not SAML/OIDC SSO.", "checked": "2026-09-30" }, "eu_data_residency": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "not offered: outside the product's scope. Self-hosted software with no vendor-managed regions; residency is entirely up to where the operator places their own Mac hardware.", "checked": "2026-09-30" }, "max_session_h": { "value": "none", "source": "https://tart.run/faq/", "quote": "Tart is limited by functionality of Apple's Virtualization.Framework.", "note": "Self-hosted VM tooling with no platform-enforced session time limit; a VM runs until the operator stops/suspends it (subject only to Apple's macOS-guest lease/SLA terms noted in the card's caveats, which govern the physical Mac lease, not a session timer).", "checked": "2026-09-30" }, "memory_snapshot_fork": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/Sources/tart/Commands/Clone.swift", "quote": "let sourceState = try sourceVM.state() ... generateMAC = ... && sourceState != .Suspended ... try sourceVM.clone(to: tmpVMDir, generateMAC: generateMAC)", "note": "reviewed: proposed correction rejected ('tart suspend' saves the running macOS VM's full state (memory) to disk via saveMachineStateTo (Run.swift: 'You can only suspend macOS VMs', 'this functionality is only supported on macOS 14 (Sonoma) or newer'). Clone.swift explicitly permits cloning a VM whose state is .Suspended (only stacked-disk VMs require .Stopped). Cloning a suspended VM copies its saved memory-state file, so the clone resumes with the same in-memory state, i.e. a memory-including fork - but only for macOS guests, and only after an explicit suspend (not from a live-running VM).)", "checked": "2026-09-30" }, "nested_virt": { "value": true, "corrected_from": false, "source": "https://tart.run/faq/", "quote": "Tart is limited by functionality of Apple's Virtualization.Framework. At the moment Virtualization.Framework supports nested virtualization only on M3 or M4 chips running macOS 15 (Sequoia) or later and only for Linux VMs. By default, it is disabled, but can be enabled by passing the --nested flag to tart run.", "note": "Nested virtualization (/dev/kvm inside the guest) is supported, gated to M3/M4 hosts on macOS 15+, Linux guests only, opt-in via --nested.", "checked": "2026-09-30" }, "computer_use": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "Tart/Orchard only expose VNC/screen-sharing, SSH, and a guest exec agent; no screenshot+click computer-use API is documented anywhere in the CLI (Run/Exec commands) or Orchard REST API.", "checked": "2026-09-30" }, "auto_stop_idle": { "value": false, "source": "https://tart.run/orchard/quick-start/", "quote": "Create a cluster of bare-metal Apple Silicon machines and manage dozens of VMs with ease!", "note": "No idle-timeout auto-stop is documented in Tart CLI or Orchard docs/FAQ; VMs run until explicitly stopped/suspended by the user or a script.", "checked": "2026-09-30" }, "inbound_https": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/Sources/tart/Commands/Run.swift", "quote": "Comma-separated list of TCP ports to expose (e.g. --net-softnet-expose 2222:22,8080:80)", "note": "Only raw TCP port forwarding (Softnet) and Orchard's port-forward-through-controller are documented; no first-party HTTPS URL/ingress is offered.", "checked": "2026-09-30" }, "agent_harnesses": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Built by CI engineers for your automation needs.", "note": "Tart/Orchard is CI VM tooling; no coding-agent (Claude Code/Codex/etc.) templates or preinstall documented in README, FAQ, or Orchard quick-start.", "checked": "2026-09-30" }, "gpu": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart uses Apple's own Virtualization.Framework for near-native performance.", "note": "No GPU/graphics-passthrough flag exists in 'tart run' (only --graphics/--no-graphics toggle the VM display device, checked in Run.swift); product is Apple-Silicon CPU/RAM VMs only, no discrete/accelerator GPU offering.", "checked": "2026-09-30" }, "windows": { "value": false, "source": "https://raw.githubusercontent.com/openai/tart/main/README.md", "quote": "Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines (VMs) on Apple Silicon.", "note": "Product is explicitly macOS + Linux guests on Apple Silicon via Virtualization.Framework, which does not support Windows guests on ARM Macs; no Windows image or flag anywhere in the CLI/docs.", "checked": "2026-09-30" }, "fork_running": { "value": true, "source": "https://github.com/openai/tart/blob/main/Sources/tart/VMDirectory.swift", "quote": "func clone(to: VMDirectory, generateMAC: Bool) throws { try FileManager.default.copyItem(at: configURL, to: to.configURL) ... try FileManager.default.copyItem(at: diskURL, to: to.diskURL) }", "note": "For a default (non-stacked) VM, `tart clone` copies config/nvram/disk files via APFS copy-on-write with no check on the source VM's state. Clone.swift only enforces `guard sourceState == .Stopped` for the `--stacked` disk-stacking path ('VM must be stopped before cloning'); the plain clone path has no such guard, so cloning a currently-Running VM is not blocked by the code. Not documented/advertised as a supported workflow, and memory state is not carried over (that requires a separate 'tart suspend' first, which does stop execution) - hence medium confidence rather than high.", "checked": "2026-09-30" }, "static_egress_ip": { "value": false, "source": "https://tart.run/licensing/", "quote": "Software licence only: Tart (Apple Virtualization.framework VM manager) + Orchard orchestrator. You bring and pay for the Macs (e.g. Scaleway / MacStadium / AWS EC2 Mac).", "note": "not offered: outside the product's scope. Tart/Orchard is self-hosted VM tooling with only NAT or host-bridged VM networking (Run.swift --net-bridged / default NAT); it does not allocate or manage any outbound IP itself - egress IP is whatever the operator's own Mac hosting provider assigns, so Tart has no static-egress-IP feature to offer.", "checked": "2026-09-30" }, "usage_api": { "value": false, "source": "https://raw.githubusercontent.com/openai/orchard/main/internal/controller/api.go", "quote": "Orchard REST API provides VM lifecycle management (create, delete, get state, events/logs) only. No usage, billing, or metrics endpoints exist. Tart is self-hosted software with a one-time licence fee, not a usage-based service.", "note": "granularity: none; cost: no; Self-hosted software: you supply and pay for your own Mac hardware separately. Tart/Orchard does not track or report billable usage per sandbox/VM/tag. The REST API (GET /vms, GET /vms/:name, POST/GET /vms/:name/events, etc.) only exposes VM lifecycle and event data, not usage metrics or cost tracking.", "confidence": "high", "checked": "2026-10-01" } }, "locations": [], "locations_source": "https://tart.run/licensing/", "locations_quote": "Software licence only: Tart (Apple Virtualization.framework VM manager) + Orchard orchestrator. You bring and pay for the Macs (e.g. Scaleway / MacStadium / AWS EC2 Mac).", "locations_checked": "2026-10-01" }