Perplexity 已开源 SPACE，一个旨在增强代理产品安全性的沙盒平台。该平台在各自独立的隔离环境中运行每个任务，利用 Firecracker microVMs 来控制凭证和出站流量。Perplexity 通过针对前沿模型进行测试，证明了 SPACE 的安全性，发现没有模型能够逃逸出沙盒并访问主机系统。 AI
影响 通过提供一个强大、开源的沙盒环境，增强了 AI 代理开发和部署的安全性。
排序理由 Perplexity 开源了其 AI 代理的沙盒平台，并详细介绍了其安全特性和测试结果。
AI 生成摘要 · Google Gemini · 来自 5 个来源。 我们如何撰写摘要 →
完整方法见我们的编辑标准。
SPACE is the first component of Perplexity's Agentic Runtime Platform. We're open sourcing it to raise the security bar for agentic products. Read the blog: https://t.co/miVD6FecqZ
We tested SPACE by attacking it with frontier models. In Escaping SPACE: Part I, nine model configurations with root inside the VM made 108 escape attempts, and none reached the host. Read the research: https://t.co/UD6qHuCuO4
Agent work in Computer is long-running, stateful, and branching, and has to survive restarts. A SPACE sandbox outlives the request that created it and the connection carrying its output. It can pause, fork, or suspend to a memory and disk snapshot, then wake where it left off.
Agents in Computer run commands, install packages, and call external services with root access inside the sandbox. The host stays outside the guest's control, and a per-sandbox gateway enforces egress policy on every outbound connection.
We're open sourcing SPACE, the sandbox platform that runs every task in Perplexity Computer. SPACE gives each agent task its own Firecracker microVM and controls credentials and outbound traffic from outside the VM. Available now under Apache 2.0: https://t.co/DzSmq6o1xA