Run agent-written code across sandbox providers, control which APIs it can call, and check a record of what ran.
Use one interface for disposable runs and persistent workspaces. Require a minimum isolation tier , how strong the wall around a run must be, on each request. Keep upstream API credentials outside guest code, the code running inside the sandbox, and check the service's account of the input and result. Sign records separately when you need saved evidence. An API is a service's callable interface, such as an endpoint that places an order or queries a database.
One job, every sandbox. A Mandelbrot picture is a fractal, an image made by repeatedly applying a small formula. The example splits it into tiles and sends pieces to sandboxes working at once. That is fan-out ; assembling the results is fan-in. Each tile runs twice so the example can compare answers across the nine configurations shown. INTERNAL · example guide and reproduction commands →.
plimsoll's entry in the Nebius x NVIDIA Global AI Hackathon is examples/nemotron-agent: an NVIDIA Nemotron model on Nebius Token Factory (EXTERNAL · product page ↗) writes code, plimsoll runs it behind gVisor , a separate user-space…
