Sandbox cost planeWave 1 governed shell
WorkspaceAweb / command-private

E2B burn, cleanup risk, and budget pressure stay operator-visible.

This view reads the canonical sandbox execution ledger and mirrors the same report shape used by the scheduled weekly delivery path.

Private route

This shell inherits authenticated page-route posture and is not exposed as a public marketing surface.

Bounded authority

Runner registration and connector mutation stay blocked; signed Mission approval issuing, sandbox eval summaries, cost visibility, and operator sandbox interrupts are live.

Manual API gate

Published /api/v2/os9 fleets, runners, approvals, and mission contracts use route-level auth and explicit OpenAPI registration; broader OS9 APIs remain closed.

Sessions0

No report loaded.

Booked cost$0.00

Actual cost when present, otherwise estimated cost.

Budget usedn/a

Budget threshold is not configured.

Failures0

Failed, interrupted, and cleanup-failed sessions in the active window.

Weekly sandbox burn

The dashboard uses the SQL-backed `sandbox_execution_sessions` rollup, matching the OS9 API and cron delivery report.

Text report
Authenticated operator session required before reading sandbox cost state.