Agent sandbox
When an agent runs code, a terminal command or edits files in its workspace, the work happens in an isolated sandbox with no network of its own. Every program it ran is listed here with its output, its files and its cost. How it works
Your limits
Set by your plan. A program that passes any of these is stopped.
Allowed hosts
Sandboxed programs have no direct network. They can only reach the hosts listed here, through the sandbox bridge, plus the platform tools their agent owns. One host per line; *.example.com allows every subdomain.
Workspaces and runs
Each agent run gets one persistent workspace. Open one to read what every program printed and to download the files it wrote.