vm_id (UUID). Created from an image, a template, or a snapshot.
Image / template. Any OCI reference. A template is that image booted once
and checkpointed; creates restore the checkpoint instead of booting. First use
of an (image, shape) registers a build — 503 template building until ready.
Runtime. container (default): the image’s entrypoint is PID 1 with a
kernel of its own. vm: the image is the machine — systemd, Docker daemons
(experimental at launch).
Shape. cpus (default 2, launch max 4), memory_mb (default 1024,
128–8192), disable_internet (no egress). Snapshot/template creates take the
source’s shape. Every sandbox gets a fixed 16 GiB sparse writable disk.
Rest states
Cheapest to most durable (p50, measured 2026-09-04, default sandbox):archive is the one operation whose cost varies with what is in the sandbox
(it packs and uploads writable memory and disk); it is a teardown-and-keep, not
a suspend. When in doubt, do nothing — autosleep covers idle; archive()
covers “done for days”.