security
Tenancy & security
Org isolation, room boundaries, and soft quotas.
Isolation bar
| Expectation | Behavior |
|---|---|
| Cross-org drive access | Denied |
| Cross-room path visibility | Denied / separate roots |
| Host filesystem from guest | Denied |
| Spoofed fabric identity | Denied — router overwrites source |
| Noisy agent memory exhaustion | Bounded queues / quotas |
Soft quotas (illustrative)
| Quota | Free (typical) | Starter (typical) |
|---|---|---|
| Concurrent sandboxes | 2 | 16 |
| Rooms | 4 | 32 |
| Memory / sandbox | ≤2048 MiB | ≤4096 MiB |
| Drive | ~5 GiB | ~100 GiB |
Exact numbers come from live usage for your org.
Defaults
- Egress: open unless you set an allowlist
- Preview auth: URL secrecy (
vm_idpath) - Topology disclosure: always
nested