Perplexity has published SPACE, the sandbox platform it uses internally to run agent-generated code. Short for Sandboxed Platform for Agentic Code Execution, the Apache 2.0-licensed Rust project creates isolated Linux environments in Firecracker microVMs and exposes them through HTTP and server-sent events.

SPACE gives applications a self-hosted place to execute code they do not fully trust. Firecracker uses Linux KVM to create lightweight virtual machines with a hardware-backed isolation boundary. Applications choose what to run and retain, while SPACE manages virtual machines, processes, filesystems, networking, and streamed output. This makes it relevant to teams evaluating hosted sandbox services such as E2B, Modal, or Daytona.

Five resources, independent lifetimes

A sandbox, its lifecycle operation, and its command stream expire independently. The sandbox can survive both the request that created it and a disconnected output stream, allowing clients to reconnect during long-running agent sessions.