{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": null,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": false,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": true,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": false,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": false,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "together-code-sandbox",
  "checked": "2026-09-30",
  "company": "Together AI (Together Computer, Inc.)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.together.ai/blog/announcing-our-series-c",
   "quote": "Four years ago, my co-founders and I started Together AI because we saw generative AI as a turning point for human progress."
  },
  "stage": {
   "value": "series-c",
   "source": "https://www.together.ai/blog/announcing-our-series-c",
   "quote": "Today, I am excited to announce the next milestone in our journey with Series C funding of $800 million from an incredible group of investors including Aramco Ventures, NVIDIA, Vista Equity, General Catalyst, Emergence Capital, SE Ventures, Pegatron, Salesforce Ventures, March Capital, DTCP Growth, Lux Capital, Geodesic, PSP Partners, and others.",
   "confidence": "high",
   "note": "This card covers Together's Code Sandbox / Code Interpreter product, which runs on the CodeSandbox platform Together AI acquired in Dec 2024; funding/stage reflect the parent company Together AI, not a separately-funded entity."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": 1333500000,
   "status": "confirmed",
   "basis": "Sum of Together AI's own announced rounds: $20M seed + $102.5M Series A + $106M extension + $305M Series B + $800M Series C, all confirmed via together.ai blog posts.",
   "source": "https://www.together.ai/blog/announcing-our-series-c",
   "quote": "Series C funding of $800 million"
  },
  "last_round": {
   "type": "series-c",
   "amount_usd": 800000000,
   "date": "2026-07",
   "leads": [],
   "status": "confirmed",
   "source": "https://www.together.ai/blog/announcing-our-series-c",
   "quote": "Series C funding of $800 million from an incredible group of investors including Aramco Ventures, NVIDIA, Vista Equity, General Catalyst, Emergence Capital, SE Ventures, Pegatron, Salesforce Ventures, March Capital, DTCP Growth, Lux Capital, Geodesic, PSP Partners, and others."
  },
  "investors": [
   "General Catalyst",
   "Prosperity7 Ventures",
   "Kleiner Perkins",
   "NVIDIA",
   "Salesforce Ventures",
   "Lux Capital",
   "Emergence Capital",
   "Coatue",
   "Aramco Ventures",
   "Vista Equity Partners",
   "SE Ventures",
   "Pegatron",
   "March Capital",
   "DTCP Growth",
   "Geodesic",
   "PSP Partners",
   "DAMAC Capital",
   "Greycroft",
   "NEA",
   "Definition Capital",
   "Long Journey Ventures",
   "Cadenza Ventures",
   "Brave Capital",
   "SK Telecom",
   "Scott Banister",
   "SV Angel",
   "Factory",
   "John Chambers"
  ],
  "portfolio_listings": [
   {
    "source": "Lux Capital",
    "company": "Together.xyz",
    "batch": 2023,
    "how": "domain"
   },
   {
    "source": "Salesforce Ventures",
    "company": "Together AI",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "SV Angel",
    "company": "Together AI",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "This card is for Together's Code Sandbox (sales-only, custom-plan Firecracker VMs) and Code Interpreter ($0.03/60-min session) products, built on CodeSandbox, which Together AI acquired in December 2024 (https://www.together.ai/blog/codesandbox-acquisition-together-code-interpreter). All ownership/funding/investor data here is for the parent company, Together AI, not a standalone entity for the sandbox product. Together AI's funding history: $20M seed (Lux Capital, undated on blog), $102.5M Series A (Nov 2023, led by Kleiner Perkins, with NVIDIA and Emergence Capital), $106M extension (Mar 2024, led by Salesforce Ventures), $305M Series B (Feb 2025, led by General Catalyst, co-led by Prosperity7), $800M Series C (Jul 2026). No lead investor was explicitly named for the Series C in Together's own post; no ARR/revenue or employee count was found."
 },
 "id": "together-code-sandbox",
 "name": "Together Code Sandbox",
 "url": "https://www.together.ai/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "custom-plan",
   "label": "Code Sandbox (together-sandbox SDK; enabled per organization through Together)",
   "flags": [
    "sales"
   ],
   "os": [
    "linux"
   ],
   "gpu_only": false,
   "pricing": "resource",
   "vcpu_h": 0.0446,
   "ram_gib_h": 0.0149,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    1,
    8
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": 0.1,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": "together-sandbox must be enabled for your organization by Together (contact); contract terms unpublished.",
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Code Sandbox is now the together-sandbox SDK (Python, TypeScript, CLI): \"The `together-sandbox` SDK and CLI must be enabled for your organization for you to use them.\" (https://docs.together.ai/docs/together-code-sandbox, 2026-10-14). Sizes: \"CPU allocation in cores (0.1–16)\" and \"Memory allocation in bytes (1–8 GB per CPU)\" (python-sdk.md); migration doc caps at \"Max 16 vCPU / 32 GB.\" Rates kept for reference: together.ai/pricing still lists Code Sandbox at $0.0446/vCPU-h + $0.0149/GiB-h (2026-10-14), not tied to a named SDK. Billing granularity for together-sandbox is unpublished (the old per-started-minute rule came from CodeSandbox credits), so min_billed/granularity are null. Access is gated, so the row stays unpriced. The CodeSandbox-based SDK is deprecated (https://docs.together.ai/docs/together-code-sandbox-legacy); its self-serve route is the codesandbox-sdk card.",
   "plans": [
    "Together Code Sandbox (together-sandbox, enabled per organization)"
   ],
   "features": {
    "isolation": "firecracker"
   }
  },
  {
   "key": "code-interpreter",
   "label": "Together Code Interpreter ($0.03 per 60-minute session)",
   "flags": [],
   "os": [
    "linux"
   ],
   "gpu_only": false,
   "pricing": "sizes",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": [
    {
     "name": "session-60min",
     "vcpu": null,
     "ram_gib": null,
     "disk_gib": null,
     "hour": 0.03,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 3600,
   "granularity_s": 3600,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Hosted Python execution API: $0.03 per session, reusable across many executions. CPU/RAM/disk unpublished (vcpu/ram null). Self-serve on prepaid Together credits. Not a general VM: no custom image, Docker or inbound ports. Re-verified 2026-10-14: together.ai/pricing \"Session (60 minutes) $0.03\"; tci-execute \"Currently only supports Python.\" The former Code Interpreter docs page (docs/together-code-interpreter) now serves the Code sandbox page, so the 60-minute lifespan rests on the pricing line alone. Not flagged alt: it is a code-interpreter product and ranks as one.",
   "features": {
    "snapshot": "none",
    "pause_resume": false,
    "fork": false,
    "persistent_disk": false,
    "custom_image": false,
    "docker_inside": false,
    "inbound_https": false,
    "max_session_h": 1,
    "code_interpreter": true,
    "fork_running": false,
    "memory_snapshot_fork": false,
    "isolation": null
   },
   "plans": [
    "Together pay-as-you-go (prepaid credits; Code Interpreter only)"
   ]
  }
 ],
 "storage": {
  "included_disk_gib": 20,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "full"
  }
 },
 "plans": [
  {
   "name": "Together Code Sandbox (together-sandbox, enabled per organization)",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": 16,
   "max_ram_gib": 32,
   "sizes_allowed": null,
   "note": "together-sandbox \"must be enabled for your organization\"; access requested by contacting Together. Concurrency and contract terms unpublished. The legacy CodeSandbox-based offering \"is available on Together's custom plans\" (legacy page)."
  },
  {
   "name": "Together pay-as-you-go (prepaid credits; Code Interpreter only)",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": 1,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": [
    "session-60min"
   ],
   "note": "Prepaid, $5 minimum credit purchase; API suspended at zero balance; auto-recharge optional; credits never expire. Only the Code Interpreter mode is self-serve on Together."
  }
 ],
 "extras": [],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 0
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": false,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": null,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": null,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": true,
  "lang_rust": true,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": false,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": false,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": null,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": true,
  "isolation": "firecracker",
  "image_oci": true,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "anti_bot": false,
  "captcha_solving": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "max_session_unlimited": true,
  "egress_ip_type": "datacenter",
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "perf_source": "No benchmark row: provider is not in ComputeSDK results or the HPC run (as of 2026-09-28). See research/perf-map.json.",
 "knobs": [
  {
   "id": "hibernation_tail",
   "label": "Idle tail before you terminate the sandbox (× session hours)",
   "kind": "slider",
   "min": 1,
   "max": 2,
   "step": 0.05,
   "default": 1,
   "unit": "×",
   "options": null,
   "effect": "hours_factor",
   "modes": [
    "custom-plan"
   ],
   "why": "together-sandbox has no idle detection (\"`ttl` counts from **creation**, not idle time.\"): a sandbox runs until terminate() or its ttl, so idle time after work ends is billed unless you terminate it. Default 1 = terminated when work ends; the 2x ceiling is a judgment call.",
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md"
  }
 ],
 "caveats": [
  "The VM mode is gated (together-sandbox \"must be enabled for your organization\" through Together), so it is not priced here. The deprecated CodeSandbox-based Code Sandbox (legacy page: Together custom plans, or self-serve via CodeSandbox) is priced on the codesandbox-sdk card.",
  "Code Interpreter: $0.03 per 60-min session, resource spec unpublished (sizes vcpu/ram null). Self-serve on the pay-as-you-go plan; not flagged alt. Session state persists within the hour; billed per session not per call.",
  "Together is fully prepaid ($5 minimum, no free trial credit); API suspended at zero balance.",
  "Storage (snapshots), egress, IPv4 pricing not published (null).",
  "Regions not published (null).",
  "perf null: benchmarks.json has no together-code-sandbox entry. The CodeSandbox benchmark row no longer applies: Code Sandbox is now the together-sandbox SDK.",
  "Code Sandbox moved from the CodeSandbox microVMs to the together-sandbox SDK (2026-10-14): no live fork, no wake on request, no idle hibernation (ttl counts from creation), no live resize, max 16 vCPU / 32 GB, all ports public unless an experimental inbound allowlist is set, preview URLs \"coming soon\", Dev Containers/Docker Compose not interpreted (https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md).",
  "Sizing sources disagree: python-sdk.md allows 0.1–16 cores at 1–8 GB per CPU (up to 128 GB), the migration doc says \"Max 16 vCPU / 32 GB\"; the card uses the 32 GB cap. Exec default user is 1000:1000; root is per-exec opt-in.",
  "together.ai/pricing does not say whether the $0.0446/vCPU-h + $0.0149/GiB-h Code Sandbox rates apply to together-sandbox or the legacy CodeSandbox offering.",
  "Code Interpreter: its docs page is gone (the URL serves the Code sandbox page); only together.ai/pricing \"Session (60 minutes) $0.03\" still states the 60-minute session."
 ],
 "sources": [
  "https://www.together.ai/pricing",
  "https://docs.together.ai/docs/together-code-sandbox",
  "https://docs.together.ai/reference/tci-execute",
  "https://docs.together.ai/docs/billing",
  "https://codesandbox.io/docs/sdk/pricing",
  "https://docs.together.ai/docs/together-code-sandbox-legacy",
  "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
  "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/python-sdk.md",
  "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/experimental.md",
  "https://trust.together.ai"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "sales",
  "raise_time_days": null,
  "verification": null,
  "tiers": "together-sandbox: access enabled per organization by Together; concurrency and create-rate limits unpublished. Legacy CodeSandbox-based offering: Together custom plans (CodeSandbox Enterprise, custom concurrency) or self-serve on codesandbox.io (see codesandbox-sdk card).",
  "notes": "together-sandbox docs (current page, python-sdk.md, migration doc) publish no concurrency or rate limits. The former CodeSandbox workspace limits (Build 10 / Scale 250 concurrent) apply only to the deprecated SDK. Together Code Interpreter has no published session/concurrency cap.",
  "sources": [
   "https://docs.together.ai/docs/together-code-sandbox",
   "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/python-sdk.md"
  ],
  "researched": "2026-10-14",
  "create_rate_limit": null
 },
 "audit_2026_09_29": {
  "applied": 6,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 4
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/python-sdk.md",
   "quote": "Omit for an ephemeral sandbox (no snapshot, deleted on termination).",
   "note": "Snapshots come from a termination_policy set at creation or a terminate() call; the docs do not say whether the policy runs when ttl expires, and there is no idle hibernation.",
   "checked": "2026-10-14"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "`terminate({ snapshot: { memory: true } })` saves the sandbox's disk and memory (hibernate);",
   "note": "Snapshot is taken at terminate; the produced snapshot gets the alias sandbox:<sandbox_id> (https://docs.together.ai/docs/together-code-sandbox).",
   "checked": "2026-10-14"
  },
  "harness_api": {
   "value": false,
   "source": "https://codesandbox.io/docs/sdk",
   "quote": "const output = await client.commands.run(\"echo 'Hello World'\");",
   "note": "SDK clients are File System, Terminals, Commands, Interpreters, Ports, Hosts, Tasks, Setup; no agent-harness driver. 'Agent' in the SDK refers to CodeSandbox's in-VM Pitcher agent, not an AI harness.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/experimental.md",
   "quote": "With a network policy, every inbound request is blocked, except those its `inbound_allowlist` admits.",
   "note": "Experimental. \"Without a network policy, every port is open to everyone.\" Rules can require a token (X-Sandbox-Token); the agent port 57468 is never filtered. The CodeSandbox-era private hosts are gone; migration doc: \"All ports are public.\"",
   "checked": "2026-10-14"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Each sandbox is a Firecracker VM with root; note the user environment runs in a Docker container inside the VM (CLEAN boot: start Firecracker VM, then start the Docker container), so rules may need to be applied at the VM level; not documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/src/types.ts",
   "quote": "env?: Record<string, string>;",
   "note": "Credentials are passed into the sandbox: session env vars and a git accessToken in SessionCreateOptions. No credential-injecting proxy documented.",
   "checked": "2026-09-29"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox.md",
   "quote": "Under the hood, the SDK uses the microVM infrastructure of CodeSandbox to spin up sandboxes.",
   "note": "derived: sandboxes are themselves Firecracker microVMs; no /dev/kvm, KVM, or nested-VM capability is documented anywhere in the SDK docs, API reference, or openapi.json (no 'kvm'/'nested' hits). Docker/Dev Containers run inside the VM, but that is container isolation, not nested hardware virtualization.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox.md",
   "quote": "Together Code Sandbox offers a fully configurable development environment with fast start-up times, robust snapshotting, and a suite of mature dev tools.",
   "note": "not offered: outside the product's scope. This is a general dev-environment/code VM (Firecracker microVM with terminals, commands, filesystem, ports, Docker) with no managed/real browser instance for the agent to drive; no Chromium/Playwright/Puppeteer mention anywhere in the SDK or CodeSandbox docs.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox.md",
   "quote": "Run generative code tooling in fast, secure sandboxes at scale.",
   "note": "not offered: outside the product's scope. Together Code Sandbox is a code-execution/dev VM product, not a browser-automation/scraping product; no stealth/fingerprinting features are documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox.md",
   "quote": "Run generative code tooling in fast, secure sandboxes at scale.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability is documented for this code/dev-VM product.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/docs/main/packages/projects-docs/pages/sdk/terminals.mdx",
   "quote": "The Terminals API allows you to create, manage and interact with terminal processes in your sandbox.",
   "note": "No SSH access is documented anywhere in the SDK docs, API reference, or openapi.json (no 'ssh' hits). Interactive shell access is exposed only via the SDK's own WebSocket-based Terminals/Commands API, not standard SSH.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/docs/main/packages/projects-docs/pages/learn/environment/vm.mdx",
   "quote": "We persist the workspace folder and the Docker engine state, like images, volumes, etc.",
   "note": "Persistence is the VM's own workspace disk (and Docker's internal named volumes inside that disk); there is no documented API to attach a separate, independently provisioned persistent volume to a sandbox.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/docs/main/packages/projects-docs/pages/learn/environment/vm.mdx",
   "quote": "Everything in your workspace is guaranteed to persist between reboots, hibernations and forks.",
   "note": "No mechanism is documented for mounting one volume across multiple simultaneously running sandboxes; each VM has its own private workspace disk.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "Not supported. Terminate with snapshot, create with new specs.",
   "note": "The CodeSandbox-era sandbox.updateTier live resize does not carry over to together-sandbox.",
   "checked": "2026-10-14"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox.md",
   "quote": "Run generative code tooling in fast, secure sandboxes at scale.",
   "note": "not offered: outside the product's scope. The SDK exposes filesystem/terminal/command/port primitives for running your own code/agent, not a first-party browser/computer-use/research task agent that Together or CodeSandbox drives itself.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/openapi.json",
   "quote": "sandboxes.create / sandboxes.update options cover privacy, vmTier, hibernationTimeoutSeconds, automaticWakeupConfig, ipcountry — no egress/network-policy fields.",
   "note": "No outbound allow/deny-list, no-internet mode, or security-group egress control is documented in the SDK docs or the openapi.json spec (no 'egress'/'allowlist'/'firewall' hits).",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/openapi.json",
   "quote": "sandboxes.create / sandboxes.update options cover privacy, vmTier, hibernationTimeoutSeconds, automaticWakeupConfig, ipcountry — no egress/network-policy fields.",
   "note": "No HTTP method/path-level egress rules are documented; only inbound host privacy (public/private/public-hosts) is controllable.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/openapi.json",
   "quote": "sandboxes.create / sandboxes.update options cover privacy, vmTier, hibernationTimeoutSeconds, automaticWakeupConfig, ipcountry — no egress/network-policy fields.",
   "note": "No fixed/static outbound IP feature is documented (consistent with the card's ipv4_available: false, no published IPv4 pricing).",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/package.json",
   "quote": "\"license\": \"MIT\"",
   "note": "Only the client-side @codesandbox/sdk library (the API wrapper/CLI) is MIT-licensed; the underlying Firecracker microVM orchestration platform that actually runs the sandboxes is closed-source, and CodeSandbox explicitly states self-hosting is not offered ('Is it possible to self-host CodeSandbox SDK? No, we do not offer self hosting at this time.', sdk/faq.mdx).",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://docs.together.ai/docs/privacy-and-security.md",
   "quote": "For customers with data-residency, regulatory, or compliance requirements... Together supports private networking and VPC-based deployments, including in EU regions.",
   "note": "Together publishes HIPAA-attested cluster placement only for its model-inference dedicated endpoints ('--placement.hipaa' restricts deployment to HIPAA-attested clusters); no HIPAA-eligibility or BAA is documented for Code Sandbox / the CodeSandbox VM platform.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": null,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Each sandbox gets 1 vCPU and 2 GiB of memory by default.",
   "note": "together-sandbox docs do not mention regions or placement; the ipcountry option was part of the deprecated CodeSandbox SDK.",
   "checked": "2026-10-14"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Sandboxes run until you terminate them",
   "note": "Nothing cleans up a sandbox unless a ttl is set at creation or --rm is passed.",
   "checked": "2026-10-14"
  },
  "desktop": {
   "value": false,
   "source": "https://www.together.ai/sandbox",
   "quote": "Fast, secure code sandboxes for AI development and agent workloads. Instant VM creation with snapshotting, flexible vCPU and memory scaling, persistent storage with git version control, DevContainer support, terminal access, task execution, and preview hosting.",
   "note": "Product is a headless microVM for code execution (terminal/commands/fs/ports only, per the SDK docs). No VNC/RDP/streamed GUI desktop offered anywhere in the docs or SDK client list.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Under the hood, the SDK uses the microVM infrastructure of CodeSandbox to spin up sandboxes... It supports: Memory snapshot/restore (checkpointing)... VM FS persistence... Environment customization using Docker.",
   "note": "No desktop exists (see desktop claim), so there is no screenshot+click driving API. SDK surfaces are fs/terminals/commands/interpreters/ports/hosts/tasks/setup only.",
   "checked": "2026-09-30"
  },
  "volumes": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "VM FS persistence (with git version control).",
   "note": "Persistence is the sandbox's own root filesystem (persistent_disk, already true on the card), not a separate attachable/shareable volume resource. No volume-attach or multi-mount API documented.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Connecting Sandboxes in the browser... In addition to running your Sandbox in the server, you can also connect it to the browser.",
   "note": "Ports are exposed via CodeSandbox preview hostnames/tokens (see ingress_rules evidence: 'private: Sandbox is private, hosts require tokens'), not a per-machine public IPv4. Card's network.ipv4_available is already false; no IPv4 offering found anywhere.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://codesandbox.io/docs/sdk",
   "quote": "const output = await client.commands.run(\"echo 'Hello World'\");",
   "note": "Same evidence already on the card for harness_api: SDK clients are File System, Terminals, Commands, Interpreters, Ports, Hosts, Tasks, Setup - no preinstalled/templated coding-agent harnesses (Claude Code, Codex, OpenCode) documented.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Together Code Sandbox can spin up a sandbox by cloning a template in under three seconds. Inside this VM, you can run any code, install any dependencies, and run servers.",
   "note": "Firecracker microVM sizes go up to 64 vCPU/128 GiB per the card's custom-plan mode; no GPU tier is listed on together.ai/pricing or in the docs, and no GPU appears in CodeSandbox's own VM tier tables.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Whenever a sandbox boots from scratch, the platform will: 1. Start the Firecracker VM 2. Create a default user (called pitcher-host) 3. (optional) Build the Docker image specified in the .devcontainer/devcontainer.json file 4. Start the Docker container",
   "note": "Firecracker only runs Linux guests; the boot sequence (Docker container inside the VM, Dev Containers) is Linux-only. No Windows guest option documented.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "Under the hood, the SDK uses the microVM infrastructure of CodeSandbox to spin up sandboxes.",
   "note": "Firecracker microVMs are Linux-KVM based and cannot run macOS guests; no macOS option anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://www.together.ai/pricing",
   "quote": "$0.0446/vCPU-h + $0.0149/GiB-h",
   "note": "No CPU architecture choice is published anywhere (only vCPU/RAM tiers); Together/CodeSandbox docs never mention ARM or Graviton instances, so no evidence an ARM64 option exists.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "The `together-sandbox` SDK and CLI must be enabled for your organization for you to use them.",
   "note": "Hosted only: access is enabled per organization by Together (legacy SDK: Together custom plans or a CodeSandbox.io account); no self-hosted/on-prem option documented.",
   "checked": "2026-10-14"
  },
  "byoc": {
   "value": false,
   "source": "https://docs.together.ai/docs/together-code-sandbox",
   "quote": "The `together-sandbox` SDK and CLI must be enabled for your organization for you to use them.",
   "note": "Runs on Together-operated infrastructure (snapshots built on \"Together's remote image builder\"); no deploy-into-customer-cloud option documented.",
   "checked": "2026-10-14"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://raw.githubusercontent.com/codesandbox/codesandbox-sdk/main/openapi.json",
   "quote": "ipcountry: This determines in which cluster, closest to the given country the VM will be started in. ... If not set, the VM will be started closest to the caller of this API.",
   "note": "Together Code Sandbox VMs run on CodeSandbox's own Firecracker microVM cloud infrastructure, placed in regional clusters selectable by country hint; no residential/mobile/ISP proxy IP product is mentioned anywhere in the Together or CodeSandbox docs, SDK reference, or openapi.json (no 'residential'/'proxy'/'mobile IP' hits). This is a standard multi-tenant cloud VM egress path, i.e. datacenter IPs, not a stated 'static' per-VM IP (card's static_egress_ip is already false).",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": true,
   "source": "https://docs.together.ai/reference/sandbox-get-usage",
   "quote": "Together provides a Sandbox Get Usage API endpoint at /reference/sandbox-get-usage for retrieving per-sandbox usage metrics",
   "note": "granularity: per-sandbox; cost: no; Together has documented REST API endpoints for usage tracking at /reference/sandbox-get-usage (per-sandbox) and /reference/get-usage-v1 (general). The sandbox-specific endpoint confirms per-sandbox usage queries are supported. Includes billable usage data but granularity is per-sandbox not per-tag.",
   "confidence": "high",
   "checked": "2026-10-01"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "Auto-wake on HTTP → not supported: a request to a terminated sandbox does not start it.",
   "note": "The CodeSandbox-era wake on HTTP/WebSocket is gone in together-sandbox.",
   "checked": "2026-10-14"
  },
  "fork_running": {
   "value": false,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "No live fork: the parent stops.",
   "note": "A new sandbox can start from the snapshot a terminated sandbox produced (see memory_snapshot_fork), not from a running one.",
   "checked": "2026-10-14"
  },
  "memory_snapshot_fork": {
   "value": true,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/python-sdk.md",
   "quote": "\"memory\": True also snapshots memory (hibernate)",
   "note": "Python SDK: to continue from a terminated sandbox, \"create a new sandbox from the snapshot it produced\"; a sandbox restored from a memory snapshot \"resumes with its processes intact\". The parent is stopped first (no live fork).",
   "checked": "2026-10-14"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "`ttl` counts from **creation**, not idle time.",
   "note": "No idle detection: track activity yourself and call terminate, or set a ttl (\"Seconds after creation before the sandbox is automatically terminated\", python-sdk.md).",
   "checked": "2026-10-14"
  },
  "docker_inside": {
   "value": null,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "Dev Container spec and Docker Compose are not interpreted.",
   "note": "Docker is only mentioned for remote snapshot builds (\"Builds run on Together's remote image builder; no local Docker is needed.\"); running Docker inside a sandbox is not documented.",
   "checked": "2026-10-14"
  },
  "custom_domain": {
   "value": null,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "Preview URLs: coming soon",
   "note": "Migration doc lists preview URLs as coming soon (a url_format template); no custom-domain support documented for together-sandbox. The old value came from CodeSandbox hosts.",
   "checked": "2026-10-14"
  },
  "root": {
   "value": true,
   "source": "https://raw.githubusercontent.com/togethercomputer/together-sandbox/main/docs/migrating-from-codesandbox.md",
   "quote": "Execs run as the agent's default user (UID/GID `1000:1000`), not root.",
   "note": "Root is available per exec by passing user: \"root\" (migration doc).",
   "checked": "2026-10-14"
  },
  "soc2": {
   "value": true,
   "source": "https://trust.together.ai",
   "quote": "The latest SOC 2 Type 2 report is now available.",
   "note": "Together trust center lists SOC 2 Type 2 and ISO 27001:2022 (company-wide). together.ai/pricing does not mention SOC 2.",
   "checked": "2026-10-14"
  }
 },
 "locations": [],
 "locations_source": "https://docs.together.ai/docs/together-code-sandbox",
 "locations_quote": "Regions not published",
 "locations_checked": "2026-10-14"
}