Description
Tangle Sandbox is a cloud runtime that provisions isolated Linux containers for AI agents. Users create sandboxes from any Docker image through a TypeScript SDK or CLI and receive a full Linux environment with root access, SSH connectivity, filesystem operations, and optional GPU support, with sub-second cold-start times. Isolation operates at three tiers: shared cloud containers for standard workloads, Firecracker microVMs for hardware-virtualized boundaries, and hardware trusted execution environments for attested isolation. Sandboxes support CRIU-based checkpoint and restore to S3-compatible storage, enabling session continuity across disconnects and parallel execution from a shared checkpoint state.