Perplexity open-sources SPACE, a Firecracker sandbox for agents
The engine behind Perplexity Computer is now Apache-2.0 on GitHub: a drop-in E2B swap with red-team receipts and sub-100ms starts. Plus Claude Code 2.1.302.
Copy markdown
A microVM for every agent task
SPACE gives each agent task its own Firecracker microVM with a dedicated guest kernel; secrets never enter the guest (injected at the network layer) and a per-sandbox gateway enforces egress on every outbound call. It's Rust, Apache 2.0, live at github.com/perplexityai/SPACE, and already runs 100% of Perplexity Computer sessions.
Drop-in for E2B — self-host it this weekend
It ships an E2B compatibility wrapper (tested against e2b==2.21.1), an HTTP+SSE API, and a reference AWS EKS deploy, so you can move agent code execution off a hosted provider onto your own box. Requirements: Linux x86_64 with KVM, btrfs, and Docker — no macOS.
The receipts: 0/108 escapes, 60ms starts
Perplexity's red-team logged 0 of 108 VM-to-host escape attempts reaching a host secret across 9 models; partial-network bypasses (11 of 54) were closed in a retest. Median create latency dropped 185ms to 60ms and p90 447ms to 89ms versus their prior provider.
Claude Code 2.1.302: standalone Design sunsets Dec 14
The new build adds an idle-compaction toggle in /config and CLAUDE_CODE_AUTO_MODE_MODEL to pick the client-side auto-mode classifier, and warns that standalone Claude Design (claude.ai/design) closes December 14, 2026. Prompt and agent hooks now cap at 12 concurrent runs of the same event.