{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": false,
  "sso": null,
  "gpu": false,
  "arm64": null,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "ucloud",
  "checked": "2026-09-30",
  "company": "UCloud Technology Co., Ltd. (优刻得科技股份有限公司)",
  "ownership": {
   "value": "public",
   "parent": null,
   "source": "https://www.ucloud.cn/site/about/intro/",
   "quote": "2020年1月，UCloud 优刻得（股票简称：优刻得，股票代码：688158）正式登陆科创板，成为中国第一家公有云科创板上市公司，同时成为中国A股市场首家“同股不同权”的上市企业"
  },
  "stage": {
   "value": "public",
   "source": "https://www.ucloud.cn/site/about/intro/",
   "quote": "2020年1月，UCloud 优刻得...正式登陆科创板",
   "confidence": "high",
   "note": "Agent Sandbox / AstraFlow is a cloud product line of UCloud Technology Co., Ltd. (listed Shanghai STAR Market, ticker 688158.SH, IPO January 2020), not a separately-funded startup. Pre-IPO venture rounds (2015-2019, e.g. reported Series A/B/C from investors including China Reform Fund, CCB Trust, CITIC) were not individually re-verified within the research time budget."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "ipo",
   "amount_usd": null,
   "date": "2020-01",
   "leads": [],
   "status": "unknown",
   "source": "https://www.ucloud.cn/site/about/intro/",
   "quote": "2020年1月，UCloud 优刻得...正式登陆科创板"
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 253238182,
   "kind": "annual revenue",
   "as_of": "2025",
   "status": "confirmed",
   "basis": "UCloud Technology Co., Ltd. (688158.SH) FY2025 annual report total operating income RMB 1,699,357,006.31, filed 2026-04-09, converted at 0.14902 USD/CNY (per card's fx basis). This is whole-company revenue, not specific to the Agent Sandbox product.",
   "source": "https://datacenter.eastmoney.com/securities/api/data/v1/get?reportName=RPT_LICO_FN_CPD&filter=(SECURITY_CODE%3D%22688158%22)",
   "quote": "\"DATATYPE\":\"2025年 年报\",\"TOTAL_OPERATE_INCOME\":1699357006.31,\"PARENT_NETPROFIT\":-73553359.46"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "UCloud (优刻得) is a publicly traded Chinese cloud computing company (Shanghai STAR Market, 688158.SH, listed Jan 2020 as China's first public-cloud STAR Market listing and first A-share dual-class-share company), founded 2012, HQ Shanghai, CEO Ji Xinhua. 'UCloud Agent Sandbox' / AstraFlow is one product line within its broader cloud/AI platform, explicitly stated by the vendor's own SDK docs to be based on the open-source E2B sandbox. FY2025 company-wide revenue grew ~13% YoY but the company posted a net loss (RMB -73.6M); figures are for the whole company, not the sandbox product specifically."
 },
 "id": "ucloud",
 "name": "UCloud Agent Sandbox",
 "url": "https://astraflow.ucloud.cn/docs/agent-sandbox",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "On-demand (UCloud China account, CNY list price)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia",
    "us"
   ],
   "gpu_only": false,
   "features": {
    "isolation": null
   },
   "pricing": "resource",
   "vcpu_h": 0.016094,
   "ram_gib_h": 0.008047,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    1,
    4
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": 1,
   "max_vcpu": 8,
   "max_ram_gib": 8,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Fee page (astraflow.ucloud.cn/docs/agent-sandbox/product/fee.md, 2026-09-28): vCPU CNY 0.00003/s per core (1 core) to CNY 0.00024/s (8 cores), linear; memory CNY 0.000015/GiB/s for 1-8 GiB in 1 GiB steps; billed per second, stops when the sandbox stops. Converted at fx.json 0.14902 USD/CNY: CNY 0.108/vCPU-h = $0.016094, CNY 0.054/GiB-h = $0.008047. Same price assumed for us-ca (Los Angeles); the fee page does not list per-region rates."
  }
 ],
 "storage": {
  "included_disk_gib": 10,
  "disk_gib_month": null,
  "disk_billed_when_stopped": false,
  "snapshot_gib_month": 0.054392,
  "snapshot_free_gib_account": 60,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "configurable",
   "bandwidth_mbps": 40,
   "evidence": [
    {
     "quote": "默认情况下，每个沙箱都拥有出站互联网访问权限",
     "url": "https://astraflow.ucloud.cn/docs/agent-sandbox/network/internet-access.md"
    },
    {
     "quote": "公网带宽 | 5 MB/s",
     "url": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/ratelimit.md"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 20,
   "max_session_h": 24,
   "max_vcpu": 8,
   "max_ram_gib": 8,
   "sizes_allowed": null,
   "note": "Quotas page (product/ratelimit.md): 20 concurrent running sandboxes, 8 cores / 8 GB max per sandbox, 10 GB storage per user, 5 MB/s public bandwidth, API calls unthrottled. Overview: total runtime per sandbox defaults to at most 24 h. Whether the concurrency quota can be raised is not stated."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 15.450427
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": null,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": false,
  "sso": null,
  "gpu_types": [],
  "regions": [
   "asia",
   "us"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "isolation": "firecracker",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Official SDK directs signup to UCloud Astraflow and states it is based on E2B open source; do not import E2B pricing or all E2B features.",
  "Rates are CNY list prices from the fee page (astraflow.ucloud.cn/docs/agent-sandbox/product/fee.md), converted at the fx.json ECB reference rate (0.14902 USD/CNY, 2026-09-28). Tax/VAT inclusion not stated. Account needs Chinese real-name verification (free quota text says real-name-verified accounts).",
  "Regions: cn-wlcb (Ulanqab, default), cn-sh (Shanghai), us-ca (Los Angeles); templates do not carry across regions. Per-region price differences not published (same rate assumed).",
  "Local disk: 10 GB per sandbox, free and ephemeral; no larger local disk offered (disk_gib_month null). Persistent storage (templates, snapshots, paused sandboxes) CNY 0.0005/GB-h beyond a 60 GB free allowance (~$0.0544/GB-month); the quotas page separately says 10 GB storage per user, conflicting with the 60 GB allowance.",
  "Egress price not published; public bandwidth capped at 5 MB/s per the quotas page.",
  "Free quota: 480 core-hours + 960 GiB-hours for real-name-verified accounts, valid 30 days (encoded as one_time_credit ~$15.45 at the list rates).",
  "Isolation technology not documented (null). Features set to null were not verified. No sandbox was purchased or tested."
 ],
 "sources": [
  "https://astraflow.ucloud.cn/docs/agent-sandbox",
  "https://pypi.org/project/ucloud-sandbox/",
  "https://astraflow.ucloud.cn/docs/agent-sandbox/product/fee.md",
  "https://astraflow.ucloud.cn/docs/agent-sandbox/product/ratelimit.md",
  "https://astraflow.ucloud.cn/docs/agent-sandbox/product/region.md",
  "research/incoming/v10-regional/out/research/fx.json"
 ],
 "fleet": {
  "default_max_instances": 20,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": "Real-name-verified account required for introductory Agent Sandbox allowance; main/subaccounts share it. Detailed ID/company-document list not stated on product pages.",
  "tiers": null,
  "notes": "Official AstraFlow quota doc: 20 concurrent sandboxes; higher quotas by contacting team. 10 fits count, 50/300/1,000 require review. 8 Core/8 GB are per-sandbox specs, not aggregate account vCPU. 10 GB per-user storage quota may constrain practical capacity.",
  "sources": [
   "https://astraflow.ucloud.cn/docs/agent-sandbox/product/ratelimit.md",
   "https://astraflow.ucloud.cn/docs/agent-sandbox/product/fee.md"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 12,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 6
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/sandbox/persistence.md",
   "quote": "After setting `on_timeout` to `pause`, the sandbox will not be destroyed when it times out, but will automatically enter the paused state.",
   "note": "Opt-in at create via lifecycle on_timeout='pause' (persists across resumes). Trigger = sandbox timeout (default 5 min, reset on connect; 24 h continuous-run cap). Pause saves filesystem + memory ('running processes, loaded variables, cached data, etc. are all saved'); with auto_resume=True it wakes on incoming activity/SDK action. Paused state billed as persistent storage.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/sandbox/snapshots.md",
   "quote": "Sandbox snapshots can capture the status of the running sandbox at a certain moment, including file system and memory status.",
   "note": "create_snapshot() on a running sandbox (brief pause, keeps running); Sandbox.create(snapshot_id) starts any number of new sandboxes from it (fork). Memory included. Billed as persistent storage.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/best-practices/codeagent.md",
   "quote": null,
   "note": "Claude Code / Codex are only covered as template recipes (npm install / code-server extensions) configured via files.write and driven via generic commands/PTY; no first-party API to prompt, stream or resume an in-sandbox agent. E2B-compatible SDK surface.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/network/internet-access.md",
   "quote": "You can specify the IP addresses, CIDR blocks, or domain names allowed by the sandbox",
   "note": "allow_internet_access=false (= deny_out 0.0.0.0/0), allow_out / deny_out with IPs, CIDRs, domains and *.wildcards (domains allow-only, via Host/SNI on ports 80/443 only; no UDP/QUIC domain filtering). update_network changes rules on a running sandbox. Enforced by an external firewall/outbound proxy.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/network/restrict-public-access.md",
   "quote": "When `allow_public_traffic` is set to false, all requests to the sandbox public URL must include the `e2b-traffic-access-token` header",
   "note": "Default: public URL per port open to anyone who knows it; allow_public_traffic=false makes it token-gated (403 without token). Set at creation only. No IP allowlist documented. SSH access documented separately.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Isolation not named in docs, but E2B-based with full memory snapshots, sudo, and Docker-in-sandbox template ('sudo docker run --rm hello-world'), which implies a VM with its own kernel and netfilter. Provider egress rules are enforced outside the sandbox.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/secret/overview.md",
   "quote": "由沙箱外部的出站代理将真实值注入请求头。因此，沙箱内的代码始终接触不到凭证本身。",
   "note": "Secret API (create/rotate/list/delete, write-only values) injected into request headers for any host registered under network.rules via Secret.fill(). HTTPS only ('明文 HTTP 请求不会被注入'); no DB/SSH/git protocols. Closed beta, off by default ('Secret 目前处于内测阶段，默认不开放'). Chinese-only docs.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/storage/volume/mount.md",
   "quote": "创建沙箱时可以挂载一个或多个 Volume。",
   "note": "Volumes independent of sandbox lifetime, mounted at create via volume_mounts (or CLI --mount name:path); SDK file ops when unmounted. Closed beta ('Volume 目前处于内测阶段，默认不开放'). Also US3 object storage via in-sandbox us3fs (user-run FUSE). Size/price unpublished.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/storage/volume/overview.md",
   "quote": "独立于沙箱存在、可挂载到多个沙箱的持久化存储。",
   "note": "Docs show '多个沙箱共享同一个 Volume' (one volume shared by several sandboxes); body text also says a volume can be mounted to different sandboxes one after another. Concurrent semantics, read-only option and locking not documented; mounts appear read-write. Closed beta.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "firecracker",
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/how-it-works.md",
   "quote": "UCloud Sandbox 沙箱运行在 LTS 6.1 Linux 内核上... 我们序列化并保存整个沙箱的文件系统以及所有正在运行的进程，以便稍后可以加载。这使我们能够在约 80 毫秒内加载沙箱",
   "note": "Not explicitly named in docs. Derived: each sandbox runs its own pinned Linux 6.1 kernel, boots/restores from a full memory+fs snapshot in ~80ms, and the product is explicitly stated to be 'based on E2B open source' (E2B's documented isolation is Firecracker microVMs). No sandbox purchased/tested to confirm directly.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/examples/docker.md",
   "quote": "安装了 Docker 或 Docker Compose 的沙箱，用于运行容器。",
   "note": "Docs show Docker-in-sandbox (containers) as a supported template but no mention of /dev/kvm, nested virtualization, or running VMs/emulators inside a sandbox anywhere in the docs. Consistent with a Firecracker-style microVM guest, which does not expose nested KVM by default.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/examples/desktop.md",
   "quote": "预装应用程序：LibreOffice、文本编辑器、文件管理器和常用工具",
   "note": "not offered: the official Desktop Sandbox template's package list (XFCE, LibreOffice, gedit, xpaint, etc.) contains no browser; no Firefox/Chromium is preinstalled or managed by the product. Users would need to apt-install their own.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "UCloud Sandbox 为您提供安全可靠的弹性沙箱计算服务...用于执行 AI Agent 生成的代码、进行自动化测试或运行不可信的脚本。",
   "note": "not offered: outside the product's scope. This is a general code-execution/desktop sandbox product; no stealth, fingerprint-evasion, or anti-bot-detection feature is documented anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "UCloud Sandbox 为您提供安全可靠的弹性沙箱计算服务...用于执行 AI Agent 生成的代码、进行自动化测试或运行不可信的脚本。",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving capability is mentioned anywhere in the docs; the product is a generic code/desktop sandbox, not a browser-automation/scraping service.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/network/internet-access.md",
   "quote": "By default, every sandbox has outbound internet access... an outbound proxy",
   "note": "Outbound traffic is routed through UCloud's own network/outbound proxy from its cloud datacenters (cn-wlcb, cn-sh, us-ca); no residential/mobile IP option is documented anywhere.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/sandbox/lifecycle.md",
   "quote": "您可以在沙箱运行时调用 `set_timeout` 方法实时更新存活时间。",
   "note": "Lifecycle docs only expose changing the timeout on a running sandbox; there is no documented API to change vCPU/RAM of a running sandbox without recreating/rebuilding it (cpu_count/memory_mb are only set at Template.build time).",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/quickstart.md",
   "quote": "claude-code | 预置 Claude Code 环境 | AI 辅助编程、智能终端交互",
   "note": "Claude Code is offered as one of the built-in ready-to-use templates, and a dedicated example (template/examples/claude-code.md) shows npm-installing '@anthropic-ai/claude-code' and running it via commands.run. best-practices/codeagent.md also shows a code-server template pre-installing both the Claude Code and Codex (openai.chatgpt) VS Code extensions.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/best-practices/desktop.md",
   "quote": "Desktop Sandbox 提供了一个带有图形用户界面 (GUI) 的 Linux 桌面环境。你可以通过 SDK 控制鼠标、键盘，甚至通过 VNC 流式传输桌面画面。",
   "note": "not offered: outside the product's scope. The SDK exposes low-level primitives (click/type/screenshot/VNC) for the caller's own agent to drive, but there is no first-party UCloud task/browser/computer-use agent that runs autonomously.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/quickstart.md",
   "quote": "pip install ucloud-sandbox",
   "note": "Native control SDK is Python (`from ucloud_sandbox import Sandbox`); code-interpreter template runs stateful Python (numpy/pandas/matplotlib) out of the box; base images also include from_python_image().",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/base-image.md",
   "quote": "template.from_node_image(\"lts\")  # node:lts",
   "note": "Node.js is offered as a predefined base-image runtime inside sandboxes (used e.g. in the Claude Code template, from_node_image('24')); there is no separate Node.js control SDK for driving sandboxes (only Python), but the Node runtime itself is available out of the box for guest code.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/network/public-url.md",
   "quote": "每个沙箱都有一个公开 URL...https://3000-<sandbox-id>.cn-wlcb.sandbox.ucloudai.com",
   "note": "Exposed ports are reached only via per-port HTTPS subdomains on UCloud's domain, never a dedicated public IPv4 address per sandbox. Matches the card's own network.ipv4_available: false.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/network/internet-access.md",
   "quote": "You can specify the IP addresses, CIDR blocks, or domain names allowed by the sandbox",
   "note": "Outbound rules (allow_out/deny_out) and the per-host header-injection 'rules' feature operate at the IP/CIDR/hostname level only; nothing in the docs restricts egress by HTTP method or URL path.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/ratelimit.md",
   "quote": "公网带宽 | 5 MB/s",
   "note": "No fixed/static outbound IP feature is documented anywhere (network docs only cover allow/deny lists and public URLs); outbound bandwidth is only described as a shared 5 MB/s quota, implying shared datacenter egress rather than a dedicated static IP per sandbox.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/ratelimit.md",
   "quote": "CPU 上限 | 8 Core | 内存上限 | 8 GB",
   "note": "not offered: the resource-limits and pricing tables list only vCPU (1-8 core) and memory (1-8 GiB) tiers; no GPU option, GPU pricing row, or GPU flag appears anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/base-image.md",
   "quote": "UCloud Sandbox 目前仅支持基于 Debian 的镜像。您的基础镜像必须是 Debian 或 Debian 衍生版本...不支持 Alpine、基于 RedHat 和其他非 Debian 发行版。",
   "note": "not offered: outside the product's scope. Sandboxes are Linux-only (Debian-family base images); no Windows machine option exists.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/template/base-image.md",
   "quote": "UCloud Sandbox 目前仅支持基于 Debian 的镜像。",
   "note": "not offered: outside the product's scope. The product is a Linux-only code/desktop sandbox; no macOS machine option is documented.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "UCloud Sandbox 为您提供安全可靠的弹性沙箱计算服务。",
   "note": "not offered: outside the product's scope. This is UCloud's own hosted multi-tenant service (built on E2B's open-source project but offered only as a managed cloud product); no self-hosting instructions or on-prem package are published for the UCloud Sandbox service itself.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "UCloud Sandbox 为您提供安全可靠的弹性沙箱计算服务。",
   "note": "not offered: outside the product's scope. No option to deploy the managed service into a customer's own cloud account is documented; it runs only in UCloud's own regions (cn-wlcb, cn-sh, us-ca).",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/cli.md",
   "quote": "curl -sS https://raw.githubusercontent.com/ucloud/ucloud-sandbox-cli/main/install.sh | sh",
   "note": "The ucloud-sandbox-cli client is published on GitHub (ucloud/ucloud-sandbox-cli, MIT), and the platform is built on E2B's open-source project, but the UCloud Sandbox backend/service itself is not published as open source — only client tooling is.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/region.md",
   "quote": "cn-wlcb | 华北（乌兰察布） ... cn-sh | 华东（上海） ... us-ca | 美国（洛杉矶）",
   "note": "not offered: the only three supported regions are two in China (cn-wlcb, cn-sh) and one in the US (us-ca); no EU region exists, so data cannot be kept in the EU.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/sandbox/persistence.md",
   "quote": "After calling `pause()`, the file system and memory state of the sandbox will be saved. ... When you resume the sandbox, it returns to the state it was in when it was paused. The file system is restored, and running processes, loaded variables, and memory data are restored.",
   "note": "Contradiction confirmed: pause/resume (and snapshots) persist the full filesystem + memory indefinitely ('Paused sandboxes will remain until you actively delete them'). Default behaviour on plain timeout is still delete: lifecycle.md says 'When automatic suspension is not enabled, the timed-out sandbox will be automatically recycled and cleaned by the system' — persistence is opt-in via lifecycle.on_timeout='pause' or an explicit pause()/create_snapshot() call, not the default. Card's persistent_disk should be corrected from false to true.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "corrected_from": false,
   "source": "https://astraflow.ucloud.cn/en-us/docs/agent-sandbox/sandbox/snapshots.md",
   "quote": "After the snapshot is created, the original sandbox will continue to run. A snapshot can be used repeatedly to create multiple new sandboxes... The original sandbox will be paused briefly and then continue to run.",
   "note": "Forking (Sandbox.create(snapshot_id) from a create_snapshot() call) is taken from a running sandbox, which is only paused for the instant it takes to serialize state and then auto-resumes — it is never stopped/killed. Docs explicitly list this as a use case: 'Suitable for scenarios ... fork running status'. This meets the field definition (clone a RUNNING machine without stopping it). Previously recorded false with no source; corrected to true.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "代码执行 | 文件操作 | Volume | 自定义模板 | 网络控制 | 公开访问 | Secret | 数据持久化 | 快照 | 多地域切换 | E2B 兼容",
   "note": "not offered: the product's own 'core capabilities' table (and the full sitemap of docs pages) lists SDK, CLI, and E2B-compatible-SDK access only; no MCP server package, docs page, or reference is published anywhere for controlling UCloud Sandbox.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox.md",
   "quote": "UCloud Sandbox 为您提供安全可靠的弹性沙箱计算服务...用于执行 AI Agent 生成的代码、进行自动化测试或运行不可信的脚本。",
   "note": "not offered: outside the product's scope. This is a China/US code-execution sandbox aimed at running untrusted AI-agent-generated code and automated tests; no BAA, HIPAA-eligibility statement, or healthcare-compliance page is published for it anywhere.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/cli.md",
   "quote": "ucloud-sandbox-cli sandbox metrics <sandbox-id> shows live per-sandbox CPU/RAM/Disk metrics, but no usage API, billing API, or cost query endpoint is documented anywhere.",
   "note": "granularity: none; cost: no; The SDK and CLI provide per-sandbox resource monitoring (live metrics), but not programmatic access to billable usage data or cost reports. Usage is billed per vCPU-second and GB-second per pricing docs, but no API endpoint exists to query historical usage or costs.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [
  {
   "country": "CN",
   "state": null,
   "city": "Ulanqab",
   "provider_region": "cn-wlcb",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Shanghai",
   "provider_region": "cn-sh",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "CA",
   "city": "Los Angeles",
   "provider_region": "us-ca",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://astraflow.ucloud.cn/docs/agent-sandbox/product/region.md",
 "locations_quote": "cn-wlcb (Ulanqab), cn-sh (Shanghai), us-ca (Los Angeles)",
 "locations_checked": "2026-10-01"
}