Perplexity's SPACE agent sandbox
- Perplexity open-sourced SPACE, the sandbox platform running every task in Perplexity Computer, under the Apache 2.0 license, with each agent task isolated in its own Firecracker microVM and credential management enforced from outside the VM.
- Agents did not escape the VM in 108 red-team attempts, and Perplexity reported SPACE processes millions of executions per day at an error rate below 0.0002%, using cryptographic identity across pause, resume, and migration events.
- Cloud partners CoreWeave, Akamai, and Crusoe signed on, and CoreWeave published a setup guide for evaluating SPACE on a CKS cluster.
Sandboxing infrastructure for AI agents is an active area of concern as agent escapes have affected organizations including Hugging Face and the Australian government. Making SPACE openly available gives outside developers a production-tested option for isolating agent tasks.