Clervo
Set up Clervo
← Back to catalog

Capability family · SB

Secure Sandbox

Run code and tools inside a bounded environment with explicit resources, network policy, timeout, and artifact handling.

Editorial family promise from the locked design. Current lifecycle and proof are shown separately.

Observed lifecycle
live
Observed proof
paid outcome verified
Published operation identities
1
Observed routes
0

Common tasks · design fixture

What agents ask this family to do.

Execute code against supplied input
Run a reproducible data transformation
Create an isolated browser or CLI task

How Clervo qualifies · design fixture

Route logic stays inspectable.

Runtime, dependencies, file access, network policy, resource limits, timeout, and side effects are explicit qualification inputs.

Unsafe behavior, unsupported runtimes, or unclear side effects are refused rather than silently expanded.
Pricing specifics are not inferred from this design fixture.

Example request → result · fixture

One bounded outcome contract.

RequestRun this JavaScript on the attached fixture and return stdout.
QualifySandbox qualifies for runtime, files, network policy, and timeout.
Returnstdout + execution evidence + receipt.

Permanent page rule

The family stays. Operations evolve.

Permanent family identity is presentation authority. Lifecycle, route, price, proof, and supplier state below remain canonical observations.

Open observed catalog

Published operation identities

1 in the current contract
Canonical contract

sandbox.run

Bounded Node.js execution in a pinned gVisor image with no network, strict resource ceilings, cleanup, receipt, and no-charge replay.

Published maximum0.01 USDC
Attributionnot published
Observed familylive
Inspect

Operations in this family

0 observed routes

No observed route for this family.

The permanent family remains in the platform. Current availability is not invented.

Claim boundary

What current authority allows—and refuses.

These lists are live-bound to the current launch-state authority, separate from the design-fixture task examples above.

Supported by current authority

  • Bounded one-shot Node.js execution is publicly callable through class-derived 0.010 to 0.060 USDC Base x402 offers.
  • The first 0.010 USDC owner-funded SHORT attempt settled and cleaned up but was rejected as a finished result after the isolated Node process exited 134 with empty output.
  • After the qualified runner correction, one 0.010 USDC owner-funded SHORT execution returned the expected useful output in gVisor, replayed without another authorization, execution, settlement, or charge, and left no runtime resources.
  • The current release is intentionally single-node and fails closed when its bounded capacity is unavailable.

Explicitly not claimed

  • Highly available
  • Unlimited scale
  • Public sessions or artifact retrieval
  • Arbitrary container images or network access
  • Customer revenue or demand

Observed at 2026-08-11T08:48:34.576Z. Supplier rights: not applicable. Payment state: public x402 owner funded short settlement and replay verified.