Perplexity has open-sourced SPACE, the sandbox platform behind Computer. Each workspace runs in a small virtual machine, while platform-held credentials and network controls remain outside the environment treated as untrusted.
Snapshots preserve files and running state across interruptions. The interesting implementation question is how those controls work together: what survives a failure, what an agent can reach, and what the control plane must verify before reporting success.
This is infrastructure to inspect and test. An isolation boundary and a published security evaluation provide evidence about a design; they do not establish that every future agent action will be safe.