What happened
Perplexity open-sourced SPACE (Sandboxed Platform for Agentic Code Execution), the Rust-based sandbox powering every Perplexity Computer agent task, under Apache 2.0. Each task runs in its own Firecracker microVM with credentials and outbound traffic controlled from outside the VM; ~60ms median spin-up, pause/resume and rolling snapshots (up to 1 week), zero escapes across ~118 adversarial attempts, and an E2B compatibility wrapper. Extends to a broader Agentic Runtime Platform roadmap; CoreWeave/Akamai/Crusoe are partners.
Why it matters
It's a production-proven, open agent-isolation layer at a moment when agent sandboxing is the core defense against prompt-injection/capability-laundering. Publishing it makes strong per-agent isolation a commodity and gives builders a self-hosted alternative to E2B/managed sandboxes.
Applicability
Platform/security teams building coding or web-using agents: evaluate SPACE for self-hosted isolation where data-residency or cost rules out managed sandboxes; treat the production-scale operating effort as the real cost of self-hosting.