pragma.vision Technology observatory & strategic foresight

Verification register Security & Identity

Readiness verdict

Perplexity SPACE (open-source agent sandbox)

A dated reading of what is claimed, reported, and independently verified in the current evidence.

As of
2026-10-21
Revision
1
Method
v1.3.0

Current reading

Readiness band and full integer triple

AI-assisted assembly · derived results

Readiness band

Ready

Primary summary from verified readiness

Confidence
83% · fresh
Computed at
2026-10-21T06:32:41.628126+00:00
Claimed
65

Public ambition and stated capability

Reported
63

Observed practitioner reporting

Verified
59

Independently supported evidence

Gap
+6

Claimed leads verified

Evidence strength Critical

Decision

What the current evidence supports

Human editorial judgment · 2026-10-21

Proceed with caution

Why
SPACE is an Apache 2.0 Firecracker microVM sandbox that Perplexity says has been in production at the vendor since July 2026, with snapshot/pause/resume and credentials kept outside the VM, and its own red-team report is unusually candid about network-egress bypasses and about weaknesses found in other vendors' sandboxes. However, all performance and security numbers are vendor-reported, the repo has no releases, and the egress-policy layer proved to be the weak point. It is a credible reference architecture, but not yet an independently validated dependency.
Next
Run the repo's Kind-cluster setup in a throwaway environment, replay the published egress-bypass cases (DNS spoof, shared-IP) against its egress profiles, and re-check for tagged releases and independent audits before any production dependency.

Constraints

Blockers

No named blocker is present in the current public projection.

Evidence summary

Derived counts

AI-assisted assembly

Total
8
Tier 1
4
Tier 2
2
Tier 3
2
Supports
3
Contradicts
1
Context
4
Latest observed
2026-10-18

Counts and dates only. Raw signals, private excerpts, trust records, and internal corpus material are not published here.

Publication record

Revisions

Initial public reading

  1. 2026-10-21 Initial recorded band: ready.

Your opinion

Tell us anything.

What works, what doesn't, what's missing — especially about our watches, lenses, and the register itself. Anonymous is fine; leave an email if you'd like a reply.