Perplexity open-sources SPACE sandbox platform, supporting AI operation in isolated micro virtual machines

Article

Perplexity open-sources SPACE: granting AI full root privileges while keeping secrets outside the virtual machine

Beating Insights AI news flash: Perplexity has open-sourced the underlying sandbox platform powering Computer SPACE, under the Apache 2.0 license.SPACE Built on Firecracker, it creates an independent micro virtual machine for each Agent task.AI can obtain root privileges inside it, freely install software, and run commands, but cannot directly control the host machine.API Secrets are managed by a system outside the virtual machine, and all outbound network connections must also be inspected through a dedicated gateway, preventing unauthorized Agent access.SPACE It also supports long-running Agent tasks. It can preserve a virtual machine's memory, execution state, and files, allowing tasks to resume after pausing or even branch from the same point to try different approaches, without having to restart after every interruption.

Perplexity said that this year,July has used SPACE to replace its previous commercial sandbox service and now creates millions of sandboxes daily. Compared with the previous service, median sandbox-creation latency fell from 185 milliseconds to 60 milliseconds, an approximately 3-fold speed improvement.

Original link https://m.theblockbeats.info/flash/372182

Key points

Beating Insights said that Perplexity has open-sourced SPACE, under the Apache 2.0 license.
SPACE Built on Firecracker, it creates an independent micro virtual machine for each Agent task.
AI Root privileges can be obtained within the virtual machine to install software and run commands, but the host machine cannot be directly controlled.
API Secrets are managed by a system outside the virtual machine, and outbound network connections must be inspected through a dedicated gateway.
SPACE It supports preserving virtual machine memory, execution state, and files, allowing tasks to resume after pausing or branch from the same point.
Perplexity said that this year,July has used SPACE to replace its previous commercial sandbox service and now creates millions of sandboxes daily.
Perplexity said median sandbox-creation latency fell from 185 milliseconds to 60 milliseconds, an approximately 3-fold speed improvement.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

SPACE It can launch an independent small virtual machine for each AI task.AI It has elevated privileges inside, while secrets and outbound network access remain controlled by systems outside the virtual machine.

Why it matters to readers

This indicates that AI agents can execute commands in isolated environments while keeping secret management and network access outside the virtual machines; state preservation also supports pausing, resuming, and branching.

It addresses a fundamental security issue: allowing AI to freely operate the task environment while reducing opportunities for direct access to the host machine and secrets.

Risks and unknowns

The material does not provide a Perplexity official announcement, open-source repository, or independent verification.
The claims of millions of sandboxes created daily, latency figures, and security isolation effects described in the article still primarily come from Perplexity.
The material does not specify the complete code, technical documentation, or security audit status under the Apache 2.0 license.

Perplexity open-sources SPACE sandbox platform, supporting AI operation in isolated micro virtual machines

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center