Cloud agent sandbox with persistent filesystem and on-demand compute
Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
Stage
MVP
Startup
Founded
Not given
2026
Based in
US
Not given
Pricing model
Paid
Free trial
Pricing
Compute: $0.015 per GiB-hour (approximately $0.000004167 per GiB-second, billed by the second). Storage: $0.02 per GiB-month for retained incremental RootFS data and memory checkpoints. Network ingress and egress currently free. Object-store GET and PUT requests free. New users receive $5 free credi
Free 12 week pilot for card issuing platforms
Key features
Automatic filesystem growth as storage fills
Pause compute without losing work or paying compute charges
Resume to same environment on demand
Access files while paused without waking compute
Public HTTP services with auto-resume capability
Command-line interface (s0 CLI) for agent-native workflows
Incremental checkpoints to avoid full filesystem copies
Scoped API keys and team-based access controls
On-demand file reads without downloading entire filesystem
Passkey-signed spend mandates with purpose, budget, merchants, and time windows
Real-time authorization decisions with sub-1 second response time at p99
Human challenge via passkey step-up for exceptional spend
Fail-closed payment processing if no decision arrives in time
Hash-chained evidence ledger with tamper-evident records
Exportable evidence packs for chargebacks and audits
Supports card, wallet, x402 and stablecoin payment rails
What makes it different
Persistent filesystem across pause/resume without duplicating data
Pay only for compute time used; paused sandboxes have zero compute charges
Automatic filesystem growth so agents can install and persist unlimited tools
Same API for both human users and AI agents
Human-approved mandates enforce intent, not just static limits or merchant category blocks
Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
Creates tamper-evident audit trail linked to agent identity, run, and policy version
Never holds funds or issues cards; integrates with existing issuer infrastructure
Single mandate and policy core across multiple payment rails and issuers
Levee