Perplexity has open-sourced SPACE, the Firecracker microVM platform behind Computer, under Apache 2.0. Its design keeps platform credentials and network control outside the agent’s untrusted workspace. It also makes interrupted work recoverable through snapshots of files and the running environment. Announcement, October 15 · Repository
One distinction in the architecture documentation deserves attention: pause leaves memory resident; suspend creates a snapshot and releases active VM resources. An accepted lifecycle request is also separate from a ready sandbox, and neither is the exit status of a command. Those distinctions determine what an application can safely promise after a dropped connection. This is a substantive implementation to inspect, with documented limitations, rather than an assertion that sandboxing makes arbitrary agent activity safe. Architecture and recovery semantics