{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": true,
  "desktop_control": true,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": true,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "vertex-computer-use",
  "checked": "2026-09-30",
  "company": "Google LLC (Alphabet Inc.) — Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine)",
  "ownership": {
   "value": "subsidiary",
   "parent": "Alphabet Inc. (Google LLC / Google Cloud)",
   "source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
   "quote": "Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine) is a Google Cloud product."
  },
  "stage": {
   "value": "public",
   "source": "https://abc.xyz/investor/",
   "quote": "Alphabet Inc. is a publicly traded company (NASDAQ: GOOGL).",
   "confidence": "high",
   "note": "This is a product line inside Google Cloud, itself a segment of the publicly traded parent Alphabet Inc.; it has no separate funding history of its own."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "subsidiary",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 350018000000,
   "kind": "annual revenue",
   "as_of": "2025",
   "status": "confirmed",
   "basis": "Alphabet Inc. FY2025 total company revenue (product-level revenue for Gemini Enterprise Agent Platform / Computer Use sandbox is not broken out separately).",
   "source": "https://abc.xyz/investor/",
   "quote": "Alphabet Inc. consolidated full-year revenue as reported in its annual (10-K) financial results; the Gemini Enterprise Agent Platform / Vertex AI Agent Engine product's own revenue is not disclosed separately from Google Cloud or Alphabet totals."
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Vertex Computer Use / Code Execution / Shell sandboxes are a feature of Google Cloud's Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine), owned by Alphabet Inc. (public company, NASDAQ: GOOGL). There is no independent ownership, accelerator, or funding-round history to report; Alphabet's company-wide revenue is cited only as context, not as this product's standalone revenue."
 },
 "id": "vertex-computer-use",
 "name": "Google Agent Platform Sandbox (Code Execution / Shell / Computer Use)",
 "url": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
 "category": "agent-sandbox",
 "isolation": "container",
 "modes": [
  {
   "key": "code-execution",
   "label": "Code Execution / Shell sandbox (API exec, same Agent Compute + Agent Memory meter)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "browser": false,
    "computer_use": false,
    "desktop": false,
    "code_interpreter": true,
    "ssh": false,
    "snapshot": "none",
    "max_session_h": 336
   },
   "pricing": "sizes",
   "vcpu_h": 0.085,
   "ram_gib_h": 0.009,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 4,
   "max_ram_gib": 4,
   "sizes": [
    {
     "name": "default (MACHINE_CONFIG_UNSPECIFIED)",
     "vcpu": 2,
     "ram_gib": 1.5,
     "disk_gib": null,
     "hour": 0.1835,
     "month_cap": null
    },
    {
     "name": "MACHINE_CONFIG_VCPU4_RAM4GIB",
     "vcpu": 4,
     "ram_gib": 4,
     "disk_gib": null,
     "hour": 0.376,
     "month_cap": null
    }
   ],
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Same published meter ($0.085/vCPU-h + $0.009/GiB-h allocated, per-second). Code Execution: Python or JavaScript (LANGUAGE_PYTHON / LANGUAGE_JAVASCRIPT), two fixed shapes (default 2 vCPU/1.5 GB, or 4 vCPU/4 GB), \"limited file system and no network access\", preinstalled libraries only (\"You can't install your own libraries\"), no snapshots, state kept up to 14 days (TTL configurable; execute_code resets the TTL). Shell sandbox: \"a managed, isolated Linux container\" reached through an /exec API, not SSH; its vCPU/RAM shape is not published."
  },
  {
   "key": "on-demand",
   "label": "Computer Use sandbox (managed browser, billed as Agent Compute + Agent Memory)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "browser": true,
    "computer_use": true,
    "desktop": null,
    "code_interpreter": false,
    "ssh": false
   },
   "pricing": "resource",
   "vcpu_h": 0.085,
   "ram_gib_h": 0.009,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Pricing page (2026-09-28): \"Runtime and Sandbox environments, including Code Execution and Computer Use, are billed on Agent Compute (vCPU-hours) and Agent Memory (GiB-hours)... vCPU resources allocated... $0.085/vCPU-h... Memory (RAM) resources allocated... $0.009/GiB-h. All usage is rounded to the nearest second.\" This regime is the Computer Use sandbox: a containerized browser driven via API actions / Chrome DevTools Protocol with a VNC live view. Not an SSH VM; a full desktop beyond the browser is not documented."
  },
  {
   "key": "savings-1y",
   "label": "Computer Use / Shell sandbox on Gemini Enterprise Flexible Savings Plan (1 year)",
   "flags": [
    "commit"
   ],
   "commit_term": "1-year",
   "vcpu_h": 0.0765,
   "ram_gib_h": 0.0081,
   "commit_note": "Spend-based 1-year Flexible Savings Plan (consumption model 7754-699E-0EBF per page); opt-in; commitment amount/minimum not stated on pricing page.",
   "note": "Pricing page Flexible Savings Plan 1-Year column: 10% off Agent Compute and Agent Memory.",
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "browser": true,
    "computer_use": true,
    "desktop": null,
    "code_interpreter": false,
    "ssh": false
   },
   "pricing": "resource",
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null
  },
  {
   "key": "savings-3y",
   "label": "Computer Use / Shell sandbox on Gemini Enterprise Flexible Savings Plan (3 year)",
   "flags": [
    "commit"
   ],
   "commit_term": "3-year",
   "vcpu_h": 0.068,
   "ram_gib_h": 0.0072,
   "commit_note": "Spend-based 3-year Flexible Savings Plan; opt-in; commitment amount/minimum not stated on pricing page.",
   "note": "Pricing page Flexible Savings Plan 3-Year column: 20% off Agent Compute and Agent Memory.",
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "browser": true,
    "computer_use": true,
    "desktop": null,
    "code_interpreter": false,
    "ssh": false
   },
   "pricing": "resource",
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": true,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "\"egress_control_config\" : { \"internet_access\" : True , }",
     "url": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use-quickstart"
    },
    {
     "quote": "Outbound internet access is off unless the template enables it.",
     "url": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart"
    },
    {
     "quote": "The sandbox offers a limited file system and no network access.",
     "url": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/code-execution-overview"
    }
   ],
   "note": "Computer Use / Shell sandboxes: internet is a per-template switch (egress_control_config.internet_access), off unless enabled; the Computer Use quickstart template turns it on. Code Execution sandboxes have no network access at all (not expressible per mode; see caveat)."
  }
 },
 "plans": [
  {
   "name": "Usage based",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": 300,
  "monthly_vcpu_h": 50,
  "monthly_ram_gib_h": 100,
  "monthly_agent_storage_gib_month": 1
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": false,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": true,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu_types": [],
  "regions": [
   "us",
   "eu",
   "asia",
   "other"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "browser_control": true,
  "desktop_control": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "ip_note": "Computer Use / Shell sandboxes reach the internet when the template sets egress_control_config.internet_access (off otherwise); Code Execution sandboxes have no network. Runs in Google Cloud, no proxy/stealth/CAPTCHA options documented; screen API covers the browser, not a full OS desktop.",
  "snapshot_on_demand": true,
  "harness_api": true,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": false,
  "isolation": "container",
  "image_oci": true,
  "snapshot_auto": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "secret_proxy": false,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "One meter, three sandbox types: Agent Compute $0.085/vCPU-h + Agent Memory $0.009/GiB-h (allocated, per-second) covers Agent Runtime, Code Execution, Shell and Computer Use sandboxes (Gemini Enterprise Agent Platform, formerly Vertex AI Agent Engine). The Runtime idle-between-turns exemption applies to Runtime only, not to sandboxes.",
  "None of these is an SSH-able VM: Computer Use is a containerized browser (API actions / CDP / VNC view); Code Execution is Python/JavaScript only with no network access; Shell sandbox runs commands through an API. Sandbox vCPU/RAM sizes are not published.",
  "ENGINE_CARD cannot apply all independent free CPU/RAM/storage/request allowances exactly. Raw regimes/worked example retain them; any engine subtotal may overstate charges or miss eligibility. Do not subtract them twice.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "Internet access differs by sandbox type: Computer Use and Shell sandboxes get outbound internet when their template sets egress_control_config.internet_access (off by default), while Code Execution sandboxes have no network access at all. The card-level setting (configurable) therefore overstates the Code Execution mode.",
  "Computer Use sandboxes expire after 2 hours by default; ttl can be set at creation and no maximum is documented. Deleted on TTL expiry, so set it to cover the whole session."
 ],
 "sources": [
  "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
  "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use",
  "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-sandboxes",
  "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/code-execution-overview",
  "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
  "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use-quickstart"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": "Google Cloud project, billing and required Agent Platform IAM/API setup.",
  "tiers": "Per project per region: 1,000 sandbox entities; 500 sandbox write (create/delete/update) requests/min; 1,000 execute requests/min; 10 Agent Platform resource (instance) writes/min; 100 Agent Platform resources.",
  "notes": "Computer Use sandbox quickstart is distinct from Code Execution. Reviewed quota page labels 1,000 sandbox entities specifically Code Execution; do not automatically assign that as Computer Use concurrent-machine allowance. New-account fleet quota/increase process not established.",
  "sources": [
   "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use-quickstart",
   "https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/agent-quotas"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 13,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 16
 },
 "feature_evidence": {
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-snapshots",
   "quote": "Save the exact state of the sandbox, including installed libraries, file system changes, and memory state.",
   "note": "Memory included. SDK client.sandboxes.snapshots.create with a TTL; restore by creating a new sandbox with sandbox_environment_snapshot; 'Branching: Create multiple sandboxes from the same snapshot' (fork). Same image/arch/runtime version required. Not supported for Code Execution sandboxes: 'Snapshots are not supported for Code Execution sandboxes.' (stated on the code-execution-overview page, https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/code-execution-overview, checked 2026-10-14).",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents",
   "quote": "The simplest way to use Managed Agents API on Agent Platform is to interact directly with the first-party Antigravity base agent.",
   "note": "Managed Agents API (Pre-GA, runs on the Agent Platform sandbox environment): Interactions API starts the Antigravity harness (base_agent antigravity-preview-05-2026) with a prompt, streams SSE events, continues via previous_interaction_id and reuses the sandbox via environment_id; Agents API creates/lists/deletes agent configs. Only Google's own Antigravity harness; no Claude Code/Codex. The plain Code Execution/Shell/Computer Use sandboxes only have exec/browser-action APIs.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/sandbox-environment",
   "quote": "By default, the sandbox operates without external network access. Explicitly enable connectivity by setting a domain allowlist in your environment configuration.",
   "note": "Managed Agents: domain allowlist, default-deny. Sandbox templates: egress_control_config.internet_access on/off ('Outbound internet access is off unless the template enables it', shell quickstart). With PSC-I, egress is bridged into your VPC and governed by Cloud NGFW rules (FQDN objects + IP ranges, default-deny) per configure-vpc-sc page. All enforced outside the container.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/configure-vpc-sc",
   "quote": "deploy Secure Web Proxy as the egress inspection point in your VPC for TLS-aware, per-URL policy",
   "note": "Only via PSC-I egress into your own VPC plus Google Cloud Secure Web Proxy (separately billed GCP product); not a sandbox-native setting.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/configure-vpc-sc",
   "quote": "Reach that data plane over a private Private Service Connect endpoint (PSC-E) in your VPC instead of over the public internet.",
   "note": "Private ingress via PSC-E limited to the same project; template declares which container ports are exposed; data-plane/CDP access requires IAM-generated WebSocket headers (generate_browser_ws_headers with a service account).",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/custom-containers",
   "quote": "Security: Must not require root privileges or access to restricted system resources, as the image will run within a secure, isolated sandbox.",
   "note": "Containerized sandbox (underlying Agent Substrate runs actors under gVisor or cloud-hypervisor microVMs); images must run without root, so in-guest iptables/nftables is not expected to be available. Not tested.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "A shell sandbox is a managed, isolated Linux container attached to an Agent Platform instance.",
   "note": "Custom-container (BYOC) docs likewise describe the sandbox as a container image run 'within a secure, isolated sandbox' without root privileges.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/custom-containers",
   "quote": "you can provide your own container images (also known as bring your own container or BYOC)... Add image to Artifact Registry: Add your image to Google Cloud Artifact Registry where Agent Platform can access it.",
   "note": "Image must come from Artifact Registry, be Linux-based, and must not require root.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "Commands run as the unprivileged user appuser; there is no sudo.",
   "note": "derived: no root/sudo inside the container and custom images 'must not require root privileges', so running a Docker daemon inside is not expected to work; not documented either way.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/custom-containers",
   "quote": "Security: Must not require root privileges or access to restricted system resources, as the image will run within a secure, isolated sandbox.",
   "note": "derived: no root/KVM access documented inside the unprivileged container sandbox.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use",
   "quote": "Computer Use sandboxes support a live streaming view (VNC), letting you to visually monitor the agent's actions in real-time.",
   "note": "not offered: the VNC/screenshot view covers the managed browser only ('a secure, isolated browser environment'), not a full OS desktop.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use",
   "quote": "Agent Platform Computer Use sandboxes provide a secure, isolated browser environment that your agents can interact with.",
   "note": "not offered: outside the product's scope; no stealth/fingerprinting-evasion features are documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use",
   "quote": "Agent Platform Computer Use sandboxes provide a secure, isolated browser environment that your agents can interact with.",
   "note": "not offered: outside the product's scope; no CAPTCHA-solving feature is documented.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-snapshots",
   "quote": "To create a snapshot of a sandbox, use the Python SDK: ... snapshot_operation = client.sandboxes.snapshots.create(...)",
   "note": "Snapshots and pause/resume both require an explicit SDK/API call; nothing is saved/restored automatically on stop or timeout.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-snapshots",
   "quote": "Branching: Create multiple sandboxes from the same snapshot to explore different paths or test variations.",
   "note": "Snapshot creation targets a sandbox by name without requiring it be paused first, so branching from a running sandbox is supported; original sandbox keeps running unaffected.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-snapshots",
   "quote": "Save the exact state of the sandbox, including installed libraries, file system changes, and memory state.",
   "note": "Snapshots (used for branching into new sandboxes) explicitly include memory state, not just disk.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-sandboxes",
   "quote": "Transition to STATE_PAUSED. Requests to their data-plane endpoint return errors until you resume.",
   "note": "A paused sandbox must be explicitly resumed via API; incoming requests do not auto-wake it.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-sandboxes",
   "quote": "Retain all in-container file system state at the moment of pause.",
   "note": "Filesystem state survives pause/resume (the sandbox's stop/start cycle); no separate 'stopped-but-not-paused' state is documented.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/custom-containers",
   "quote": "you can provide your own container images... This feature lets you run custom workloads within the secure confines of a sandbox environment.",
   "note": "not offered: no attachable extra persistent volume is documented; sandboxes only have their own container filesystem.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/custom-containers",
   "quote": "you can provide your own container images... This feature lets you run custom workloads within the secure confines of a sandbox environment.",
   "note": "not offered: no volume shareable across multiple running sandboxes is documented.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-sandboxes",
   "quote": "To change an existing sandbox's configuration, you must delete it and create a new one.",
   "note": null,
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents",
   "quote": "The simplest way to use Managed Agents API on Agent Platform is to interact directly with the first-party Antigravity base agent.",
   "note": "The only preinstalled agent is Google's own Antigravity base agent; no third-party coding harnesses like Claude Code, Codex, or OpenCode are offered as templates.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents",
   "quote": "You'll learn how to engage with custom agents built using the Agents API and the prebuilt Antigravity base agent, including configuring it dynamically.",
   "note": "not offered: the only first-party managed-agent product documented is Antigravity, a coding/dev harness (an ADK/'base agent'), not a browser/computer-use or research task agent; the Computer Use sandbox itself only exposes raw action/CDP APIs, no first-party agent driving it.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents",
   "quote": "A common use case is dynamically overriding connections to Model Context Protocol (MCP) servers at runtime.",
   "note": "MCP is referenced only as a client-side tool spec that agents can connect to (bring-your-own MCP servers); no evidence the provider ships its own MCP server for controlling its sandboxes.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/code-execution-quickstart",
   "quote": "Only LANGUAGE_PYTHON and LANGUAGE_JAVASCRIPT are supported.",
   "note": "Code Execution sandbox supports JavaScript in addition to Python.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/configure-vpc-sc",
   "quote": "Enable private ingress with Private Service Connect (PSC-E)... Private ingress can be enabled for exactly one consumer project, and it must be the same user project the sandbox runs in.",
   "note": "Sandbox ingress is via private PSC endpoints/IAM-signed WebSocket connections, not a public IPv4 address.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/configure-vpc-sc",
   "quote": "The sandbox exposes an interactive data plane and makes outbound calls, so it is governed with two Private Service Connect controls: private ingress (PSC-E) and egress control (PSC-I).",
   "note": "No public HTTPS URL to reach a sandbox port is documented; access is via a private PSC endpoint or an IAM-authenticated CDP/WebSocket connection.",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/sandbox-environment",
   "quote": "MCP credentials scoping: Header configurations for Model Context Protocol (MCP) servers, which contain backend authentication tokens, are transmitted only when accessing the specific MCP endpoints defined in your configuration.",
   "note": "This scoping only limits when configured MCP-server tokens are sent; it is not a general first-party proxy that injects credentials for arbitrary HTTP APIs.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
   "quote": "Runtime and Sandbox environments, including Code Execution and Computer Use, are billed on Agent Compute (vCPU-hours) and Agent Memory (GiB-hours) resource usage.",
   "note": "Sandbox pricing/sizes are CPU+RAM only (fixed shapes 2vCPU/1.5GB or 4vCPU/4GB); no GPU option is documented for Code Execution/Shell/Computer Use sandboxes.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-snapshots",
   "quote": "You cannot restore a sandbox snapshot to a new sandbox environment if any of the following conditions are true: The new sandbox uses a different server architecture (for example, amd64 versus arm64).",
   "note": "Implies arm64 is an available sandbox server architecture alongside amd64; not otherwise separately documented as a selectable option.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
   "quote": "Gemini Enterprise Agent Platform... Unified platform for ML models, generative AI, and agent building.",
   "note": "not offered: outside the product's scope; this is a fully managed Google Cloud service, not software you run on your own infrastructure.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
   "quote": "Gemini Enterprise Agent Platform... Unified platform for ML models, generative AI, and agent building.",
   "note": "not offered: outside the product's scope; sandboxes run in Google Cloud's own infrastructure, not deployed into the customer's cloud account.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
   "quote": "Gemini Enterprise Agent Platform... Unified platform for ML models, generative AI, and agent building.",
   "note": "not offered: proprietary managed Google Cloud service; core sandbox implementation is not published under an OSI license.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": true,
   "source": "https://cloud.google.com/security/compliance/soc-2",
   "quote": "Google Cloud regularly undergoes third-party audits for our products, systems, and infrastructure related to this standard.",
   "note": "Core Google Cloud SOC 2 Type II reports cover the platform broadly; Agent Platform is listed as a featured Google Cloud product on the compliance offerings page, but the sandbox sub-feature is not separately named in the SOC 2 scope list retrieved.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": true,
   "source": "https://cloud.google.com/security/compliance/hipaa",
   "quote": "Covered Products ... Gemini Enterprise Agent Platform",
   "note": "Gemini Enterprise Agent Platform is explicitly listed among Google Cloud's HIPAA-covered products (BAA available).",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction",
   "quote": "Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol.",
   "note": "SAML/OIDC SSO is a Google Cloud platform-wide capability (via Cloud Identity/Workspace federation) covering console/API access to Agent Platform; not a sandbox-specific feature page.",
   "checked": "2026-09-30"
  },
  "root": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "Commands run as the unprivileged user appuser; there is no sudo.",
   "note": "Shell sandbox explicitly runs as unprivileged appuser with no sudo. Custom-containers page also requires images to run without root ('Must not require root privileges... as the image will run within a secure, isolated sandbox'). No mode documents a root/sudo option.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "A shell sandbox is a managed, isolated Linux container attached to an Agent Platform instance. The sandbox runs a shell command sent by your agent and returns stdout, stderr, and an exit code.",
   "note": "Shell sandbox is reached only via an API-driven exec call (one-shot commands, no persistent shell session), Code Execution runs Python/JS via API, and Computer Use is driven via API actions/CDP with a VNC view. No mode documents an SSH endpoint or key-based SSH access anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/manage-sandboxes",
   "quote": "Pausing a sandbox releases its compute resources while preserving disk state and connection metadata. ... Use pause when a sandbox is idle for an extended period but you want to preserve session state and connection identity for later use.",
   "note": "Pause is an explicit API call (client.sandboxes.pause(...)) you trigger yourself, not an automatic idle-detection stop. The only automatic lifecycle action is a fixed config.ttl timer that deletes the sandbox when it expires ('the sandbox is removed automatically when the TTL expires'), which is a hard TTL, not idle-based auto-stop.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "A shell sandbox is a managed, isolated Linux container attached to an Agent Platform instance.",
   "note": "All three sandbox types (Code Execution, Shell, Computer Use) are Linux containers; no Windows machine option is documented anywhere in the Agent Platform sandbox docs.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/shell-sandbox-quickstart",
   "quote": "A shell sandbox is a managed, isolated Linux container attached to an Agent Platform instance.",
   "note": "Same as windows: all sandbox modes run as Linux containers on Google Cloud; macOS is outside the product's scope (Google Cloud offers no macOS compute in this product family).",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": true,
   "source": "https://cloud.google.com/billing/docs/how-to/export-data-bigquery",
   "quote": "Cloud Billing export to BigQuery enables detailed cost analysis by breaking down billing data by resource labels and tags. Sandboxes can be labeled during creation and subsequent costs tracked through BigQuery queries.",
   "note": "granularity: per-tag; cost: yes; Google Cloud provides usage/cost APIs through two main paths: (1) Cloud Billing API for account-level billing, and (2) BigQuery export of detailed billing data with breakdown by resource labels. Individual sandboxes can be tagged with labels and their compute/memory usage tracked through BigQuery by filtering on those labels. No dedicated per-sandbox REST API endpoint is documented, but the BigQuery export approach allows per-resource cost retrieval programmatically.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "open_internet": {
   "value": true,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use-quickstart",
   "quote": "\"egress_control_config\" : { \"internet_access\" : True , }",
   "note": "Computer Use quickstart creates its template with internet access on; shell quickstart: \"Outbound internet access is off unless the template enables it.\" Not available for Code Execution sandboxes (\"no network access\").",
   "checked": "2026-10-14"
  },
  "max_session_h": {
   "value": null,
   "source": "https://docs.cloud.google.com/gemini-enterprise-agent-platform/scale/sandbox/computer-use-quickstart",
   "quote": "By default, sandboxes expire after 2 hours. You can customize the sandbox lifetime by setting the ttl field when creating a sandbox.",
   "note": "No maximum TTL is documented for Computer Use / Shell sandboxes (manage-sandboxes: \"You can set config.ttl when you create the sandbox so that the sandbox is removed automatically when the TTL expires\"). The earlier 168 h came from the Managed Agents sandbox (\"a standard time to live (TTL) of 7 days. Each new interaction automatically resets this timer\"), a different product. Code Execution mode keeps its own 336 h (\"Sandboxes maintain their execution state (memory) for up to 14 days\").",
   "checked": "2026-10-14"
  }
 },
 "locations": [],
 "locations_source": "https://cloud.google.com/products/gemini-enterprise-agent-platform/pricing",
 "locations_quote": "Runtime and Sandbox environments, including Code Execution and Computer Use, are billed on Agent Compute (vCPU-hours) and Agent Memory (GiB-hours) resource usage.",
 "locations_checked": "2026-10-01"
}