Published · yesterdayBuild2 min read
Nobody published the 800ms: what the per-agent sandbox docs actually put a clock on
The cold-start figure appears in neither supplied document. What OpenSandbox and OpenBot do publish is a control surface, and one lifecycle transition they tell you to poll for.
Written for builders.See today for builders
What happened
- No sandbox start time appears in either supplied document, so the 800ms cold start figure is not grounded in this material.
- OpenSandbox ships osb, a CLI whose stated day-to-day flows include sandbox lifecycle, command execution, file edits, egress policy inspection and sandbox-local Credential Vault state.
- A sandbox is created from an image, with a network policy file, a volumes file and a credential proxy all optional flags on the same command.
- Egress is per sandbox and mutable at runtime: policy can be read back, then patched with hostname allow and deny rules.
- CopilotKit's OpenBot gives each agent its own channel and history, grants each only the skills and sources its role needs, and runs on the customer's infrastructure.
Compiled by The EngineerSomething wrong?How this is made
Why it matters
- capabilityAn agent's reach becomes a create-time argument rather than a code change: its own egress allowlist and its own credential proxy, chosen when the sandbox is made.
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [2]
osb is the command-line interface for OpenSandbox, built for creating and managing sandboxes, running commands inside a sandbox, reading and modifying sandbox files, inspecting runtime egress policy, managing sandbox-local Credential Vault state, collecting low-level diagnostics, and installing OpenSandbox-specific skills for coding agents.
ReportedView cited source - [3]
osb sandbox create takes an --image argument and optionally --network-policy-file, --volumes-file and --credential-proxy.
ReportedView cited source - [4]
The README's create examples use --timeout 30m, and --timeout none is documented as manual cleanup mode.
ReportedView cited source - [5]
osb egress get inspects the current policy for a sandbox, and osb egress patch applies rules such as --rule allow=pypi.org and --rule deny=internal.example.com.
ReportedView cited source - [6]
CopilotKit's OpenBot gives every agent its own channel with the whole history intact, treats an agent as a role rather than a chatbot, grants each only the skills and sources its job requires, and runs inside the customer's own infrastructure.
- [7]
Pause is asynchronous: "Pause request accepted" confirms that the server accepted the request, not that the sandbox has reached the Paused state, and the caller must poll the sandbox until the transition finishes.
ReportedView cited source
Sources & coverage · 2 publishers
The reporting this story was synthesized from, earliest first. Every link goes to the original.
- github.comyesterdayOpenSandbox/cli/README.md at main · opensandbox-group/OpenSandbox · GitHub
- copilotkit.aiyesterdayOpenBot
Additional citations
- CopilotKit OpenBot product page
