Featured (09) The primitives most templates reach for first.
A disposable Linux box with a shell, a filesystem, and a real browser.
#runtime
computer disposable
$ naive computer create --image ubuntu-24.04 --browser
box · iad /workspace 2 vcpu · 4 gb · chromium 129
running shell fs browser git
shell 4
git clone acme/shop 0.8s ok pnpm install && pnpm test 42 passed ok browser open · shop.acme.co/admin 1280×800 ok naive files publish · report.pdf 1.2 mb ok $0.00 / hr asleep
One model, three prices. Wait longer, pay less. The cheap lane never silently upgrades.
#runtime
completion window example prices
$ vetta run --model claude-sonnet-5 --window loose
loose · ≤ 24 h 0.35× same model · same output · quoted before the call
1.00× immediate priority loose
lanes 3
immediate · now 1.00× open priority · ≤ 1 h 0.60× open loose · ≤ 24 h 0.35× chosen rates vary by model
Wake on a schedule, spend a budget, deliver. Recurring work without a machine left on.
#runtime
cron · weekly-report 0 9 * * mon
$ vetta cron create weekly-report --at "0 9 * * mon" --budget 2
next wake mon 09:00 $2.00 per run · sleeps between ticks
in 6d 14h mon tue wed thu fri sat sun
last run 5
wake · budget $2.00 09:00 done pull analytics · 4 sources 09:01 done draft + review report 09:03 done deliver report.pdf 09:04 sent sleep · $0.71 spent 09:04 idle no machine left on
Virtual cards with a hard spend cap. The agent cannot raise it.
#gateway
cards $500 cap
$ naive cards create --name Marketing --spending-limit 50000
Marketing Ads & SaaS •••• 4471
VISA OpenAI −$48 allowed Twilio −$3 allowed Unknown SaaS −$200 declined Scoped cards 3 purposes
● Marketing $500
Ads & SaaS · •••• 4471 ○ Ops $250
Infra & vendors · •••• 8824 ○ Research $100
APIs & data · •••• 1193 2 allowed · 1 declined per-agent budgets
Plain-language actions, autonomous signup and login, saved logins behind a grant. Credentials land in the vault, not the prompt.
#gateway
browser sandbox
$ browser signup figma.com
▲ figma.com/signup
Sign up Action log DOM access
10:02 goto "figma.com/signup" 10:03 fill input[name=email] 10:04 fill input[name=password] 10:05 click button[type=submit] 10:06 vault.store(credentials) credentials → vault isolated session
Disposable cloud phones for your agents. Look at the screen, tap, type, and watch it live.
#gateway
mobile sandbox android
$ vetta mobile create --name pixel --os-version 15
pixel · android 15 Sign in 540×1200 · tap by point or by label
look tree tap type
actions 4
create · pixel ~1 min ready screenshot 540×1200 ok tap · text: Sign in 81, 1087 ok open_url · shop://orders ok $0.039 / min
One priced catalogue of ~1,900 read-only tools: companies, people, finance, jobs, news, SEO, real estate, reviews, social and more. No connected account.
#gateway
data read-only
$ vetta data search "earnings results" --domain finance
finance · earnings results 18 domains read-only · no connected account search describe run
catalogue 5
search · earnings results free ok describe · input schema free ok run · finance · last quarter listed price json real estate · property listings per call ready compliance · sanctions check per call ready refused runs are free
Posts, profiles, comments, followers, hashtags and trends from X, Instagram, TikTok, YouTube, Reddit and more. No connected account.
#gateway
social data read-only
$ vetta social-data run <tool_id> --query username=nasa
instagram · profile @nasa read-only · no connected account search describe run
catalogue 4
search · instagram profile free ok describe · input schema free ok run · username: nasa $0.0039 json tiktok · hashtag posts $0.0039 ready refused runs are free
Human-in-the-loop at the tool boundary. Risky calls freeze until someone decides.
#gateway
audit log $250 cap
10:14 cards.create Allowed 10:19 email.send Allowed 10:22 payment.charge Allowed 10:23 payment.charge Revoked 10:31 formation.submit Allowed 10:38 trading.order Revoked 10:44 vault.reveal Allowed Runtime (12) What Naive Managed Agents actually runs: the durable loop, the machine, the budget, and the schedule.
A disposable Linux box with a shell, a filesystem, and a real browser.
#runtime
computer disposable
$ naive computer create --image ubuntu-24.04 --browser
box · iad /workspace 2 vcpu · 4 gb · chromium 129
running shell fs browser git
shell 4
git clone acme/shop 0.8s ok pnpm install && pnpm test 42 passed ok browser open · shop.acme.co/admin 1280×800 ok naive files publish · report.pdf 1.2 mb ok $0.00 / hr asleep
One model, three prices. Wait longer, pay less. The cheap lane never silently upgrades.
#runtime
completion window example prices
$ vetta run --model claude-sonnet-5 --window loose
loose · ≤ 24 h 0.35× same model · same output · quoted before the call
1.00× immediate priority loose
lanes 3
immediate · now 1.00× open priority · ≤ 1 h 0.60× open loose · ≤ 24 h 0.35× chosen rates vary by model
Wake on a schedule, spend a budget, deliver. Recurring work without a machine left on.
#runtime
cron · weekly-report 0 9 * * mon
$ vetta cron create weekly-report --at "0 9 * * mon" --budget 2
next wake mon 09:00 $2.00 per run · sleeps between ticks
in 6d 14h mon tue wed thu fri sat sun
last run 5
wake · budget $2.00 09:00 done pull analytics · 4 sources 09:01 done draft + review report 09:03 done deliver report.pdf 09:04 sent sleep · $0.71 spent 09:04 idle no machine left on
A durable run: wake, take a turn, commit, sleep. Interrupt and steer over REST.
#runtime
session durable
$ vetta sessions steer ses_7f3a "ship it as a PR"
session ses_7f3a turn 5 · resumes where it stopped
sleeping wake turn commit sleep
turns 5
turn 1 · plan commit turn 2 · read repo · run tests commit turn 3 · fix flaky test · rerun commit steer · ship it as a PR rest turn 5 · open PR #142 commit every turn committed
Versioned playbooks the model reads on demand. Pin a revision with slug@N.
#runtime
skills versioned
$ vetta skills pin deploy-vercel@4
skill deploy-vercel SKILL.md · 1.2 kb · read on demand
pinned @1 @2 @3 @4
loaded 4
deploy-vercel · @4 pinned triage-sentry · @7 latest write-release-notes · @2 idle seo-brief · @1 idle pin with slug@N
Name any model. Managed Agents routes it. Swap providers without changing the agent.
#runtime
router 300+
POST /v1/chat → one endpoint
OpenAI84 Anthropic62 Google48 Meta36 Mistral28
Routed to claude-sonnet-4.6 anthropic / chat completions 248 tokens · $0.004
Next in chain auto-fallback
OpenAI gpt-5 queued Google gemini-2.5-pro queued Meta llama-4 queued DeepSeek deepseek-v3 queued A USD cap quoted before every call. The run stops rather than overspending.
#runtime
budget $25.00 cap
$ vetta run --budget 25 --max-task 5
spent today $18.42 of $25.00 · the agent cannot raise it
74% quotes 4
claude-sonnet-5 · 12k tok $0.19 allowed generate_image · 4 shots $0.32 allowed generate_video · 20s $1.20 allowed generate_video · 60s $7.80 over cap quoted before every call
A roster of roles. The lead hands each one a task, not the whole transcript.
#runtime
team one lead · 3 roles
$ vetta team add writer --model claude-sonnet-5 --budget 4
lead delegating hands each role a task, not the transcript
3 tasks out
research writer ops
tasks 3
research · web_search · brain $0.40 done writer · draft → review $1.10 running ops · email · calendar N/A queued results return to the lead
A JSON schema on the agent or the session. The answer arrives typed.
#runtime
output_schema typed
$ vetta run --schema deal.json
{
"company": "Northwind",
"score": 82,
"risks": ["churn", "pricing"],
"next_step": "call founder"
} fields 4
company · string valid score · integer · 0–100 82 valid risks · string[] 2 valid next_step · enum valid no parsing on your side
Artifacts that survive the sandbox. Publish out; the box itself is disposable.
#runtime
files outlive the box
$ vetta files publish dist/report.pdf
artifact report.pdf 1.2 mb · sha256 …9f3a · files/report.pdf
published sandbox publish url
artifacts 4
report.pdf 1.2 mb published hero.mp4 48 mb published data.csv 310 kb published scratch/ N/A dropped sandbox discarded
Signed events when a run sleeps or a job finishes. Rotate secrets with overlap.
#runtime
audit log $250 cap
10:14 cards.create Allowed 10:19 email.send Allowed 10:22 payment.charge Allowed 10:23 payment.charge Revoked 10:31 formation.submit Allowed 10:38 trading.order Revoked 10:44 vault.reveal Allowed Every control-plane action, attributed to a principal, queryable later.
#runtime
audit log $250 cap
10:14 cards.create Allowed 10:19 email.send Allowed 10:22 payment.charge Allowed 10:23 payment.charge Revoked 10:31 formation.submit Allowed 10:38 trading.order Revoked 10:44 vault.reveal Allowed Identity & legal (06) A real name in the world: KYC, a company, a domain, an inbox, and a phone number.
Hosted identity checks for founders. The gate before a company can exist.
#gateway
agent.id verified
KYC KYB EIN
Legal name verified Document passport Formation WY LLC EIN 88-xxxxxxx Registered agent active A real US company. KYC to EIN in one funnel.
#gateway
formation KYC to EIN
$ naive formation submit --state WY --name "Acme Labs LLC"
Funnel 4 / 4 gates
✓ KYC verification
✓ Submit formation.submit
✓ State state filing
✓ EIN EIN + docs
KYC → Submit → State → EIN
Entity unlocked Acme Labs LLC
Complete Wyoming LLC · EIN 88-••••••7 · agent-ready
Gate outputs cross-primitive
KYC to EIN one primitive
Provisioned and custom domains. Agents edit DNS.
#gateway
domains multi-tenant
$ domains connect --tenant
Tenant mapping 5 customers
tenant domain status
acme-corp app.acme.com
SSL auto
beta-labs beta.co
SSL auto
northwind shop.northwind.io
SSL auto
startup-x api.startup-x.dev
SSL auto
demo-tenant demo.naive.run pending
SSL queued
per-customer domains DNS managed
Custom-domain inboxes. Send and receive. Threads stay intact.
#gateway
agent@acme.com inbox
Outbound 3 sent
→ Partnership intro sarah@partner.io
delivered → Invoice #1042 billing@stripe.com
delivered → Weekly summary team@acme.com
sent Inbound
Re: Partnership intro sarah@partner.io
new Deploy complete no-reply@vercel.com
new Campaign results hello@customer.io
Re: Invoice #1042 billing@stripe.com
webhook · inbound threads preserved
US numbers with carrier registration. Send and receive SMS.
#gateway
Inbox · 6 new
agent@acme.com Email +1 415…142 SMS billing@stripe.com Email no-reply@vercel.com Email +1 628…907 SMS hello@customer.io Email The agent's own name and email. The identity it signs up with.
#gateway
acme-web / auth users
email google github 1.2k users
Sessions active
revoke →
Money (04) Spend and get paid under caps the agent cannot raise: cards, crypto, brokerage, credits.
Virtual cards with a hard spend cap. The agent cannot raise it.
#gateway
cards $500 cap
$ naive cards create --name Marketing --spending-limit 50000
Marketing Ads & SaaS •••• 4471
VISA OpenAI −$48 allowed Twilio −$3 allowed Unknown SaaS −$200 declined Scoped cards 3 purposes
● Marketing $500
Ads & SaaS · •••• 4471 ○ Ops $250
Infra & vendors · •••• 8824 ○ Research $100
APIs & data · •••• 1193 2 allowed · 1 declined per-agent budgets
A per-agent crypto wallet with x402 stablecoin payments.
#gateway
wallet USDC · Base
Available 42.18 USDC
perTxMax 1.00 daily 25.00
x402 payments live
api.x402.dev/data −0.12 pay.acme.ai/infer −0.40 market.feed/quote −0.02 cdn.assets/pull denied caps enforced at signing agent cannot raise
Connect a brokerage, place orders, stream market data.
#gateway
trade live
NVDA 1m 5m 15m 1H 1D 1W Indicators
NVDA · 1D · O 929.8 H 952.1 L 921.4 C 948.2
SELL 947.80 BUY 948.20 Vol 48.2M
Watchlist +
Sym Last %
NVDA 948.20 +1.98% AAPL 214.08 +0.42% TSLA 248.51 −1.12% SPX 5,632 +0.28% AMD 162.44 −0.73% News 1h
NVDA extends gains as data-center demand holds.
Performance +2.4% 1W +8.1% 1M −1.3% 3M +22% 6M +41% YTD +88% 1Y
One balance for every gateway call. Top up once.
#gateway
billing Pro plan
$ naive billing topup --amount 500
Credit balance $1,284.50
burn rate $42/day
$0 ~19 days left
Recent usage per primitive
llm −$18.40 images −$6.20 social −$2.10 email −$0.80 last top-up · 2d ago unified balance
Automation (03) Hands on a computer: a browser, a phone, and OAuth into the apps you already pay for.
Plain-language actions, autonomous signup and login, saved logins behind a grant. Credentials land in the vault, not the prompt.
#gateway
browser sandbox
$ browser signup figma.com
▲ figma.com/signup
Sign up Action log DOM access
10:02 goto "figma.com/signup" 10:03 fill input[name=email] 10:04 fill input[name=password] 10:05 click button[type=submit] 10:06 vault.store(credentials) credentials → vault isolated session
Disposable cloud phones for your agents. Look at the screen, tap, type, and watch it live.
#gateway
mobile sandbox android
$ vetta mobile create --name pixel --os-version 15
pixel · android 15 Sign in 540×1200 · tap by point or by label
look tree tap type
actions 4
create · pixel ~1 min ready screenshot 540×1200 ok tap · text: Sign in 81, 1087 ok open_url · shop://orders ok $0.039 / min
OAuth into Gmail, calendars, and 1,000+ apps. Tokens stay vaulted.
#gateway
connections OAuth
$ naive connections connect gmail --user usr_8f3k
Connected services 7
vault-backed auto-refresh
per-user scope
Stripe
Vercel
Supabase
GitHub
Slack
Gmail
Per-user scope 3 users
usr_8f3k founder 7 linked
usr_2a1b member 3 linked
usr_9c4d member 1 linked
tokens vaulted
Content (11) Make and publish: image, video, characters, 3D, clips, audio, one library, and social posts.
Generate images and pull licensed stock through one call.
#gateway
Generate video from a prompt with any model in the live catalogue; poll the job, get a file.
#gateway
Swap the place, an outfit, an object or a person in a 3–15 s clip, from a prompt and up to four photos.
#gateway
naive up live
provisioned in 1 call
Train a character once from reference photos, then every image and video your agent renders keeps the same face.
#gateway
characters consistent face
$ vetta character create --name Ava --image ./ava-*.jpg
chr_3ysz… Ava · ready trained from 6 photos · $3.25 · approved before it ran
ready renders as Ava 4
generate_image · café, laptop open $0.01 same face generate_image · street, golden hour $0.01 same face generate_video · 5s · 720p $0.65 same face create_character · Ava v2 $3.25 ask list · get · delete
Generate a textured GLB from a description or 1–4 photos, optionally rigged, for props, characters and product shots — or build dimensioned parts in build123d (mm) or Blender (m) on the agent's computer, checked watertight, rendered, and published as STEP, STL, 3MF, GLB, OBJ or .blend.
#gateway
3d assets generate · build
$ vetta computer build-3d cmp_… bracket.py --engine cad
build123d · mm bracket · ok valid solid · watertight · 80 × 40 × 12 mm
published 4
bracket.step · for manufacturing 214 KB cad bracket.3mf · for printing 96 KB print preview.png · 4 views 128 KB render generate_3d_model · brass lamp · GLB $0.78 job STEP · STL · 3MF · GLB · OBJ · .blend
Cut scored, captioned short-form clips from longer video. 9:16 and 16:9, caption presets.
#gateway
clips clipping
▶ 00:14:08 / 00:32:00
⏮ ▶ ⏭
Scene A · trimmed export ready
One library for every image, video, clip, screenshot and recording the agent makes — titled, tagged, searchable.
#gateway
media library 247 assets
$ naive media list
All 247
Images 142
Video 58
Clips 47
mountain-road.jpg images
"alpine road at dusk" #social #hero
cdn.naive.run/a/mountain-road per-user scope tenant isolated · CDN ready
Transcribe recordings with timestamps, turn text into speech, or answer speech with speech, saved to Files.
#gateway
Turn a description into a short sound effect — ambience, foley, a sting — saved to Files. Optional length and seamless loop.
#gateway
Turn a description into an original song — any genre, mood or instrumentation — saved to Files. Optional length and an instrumental-only switch.
#gateway
Post and schedule across 10+ platforms from one compose.
#gateway
social cross-post
$ naive social post "Ship day" --platforms x,linkedin,instagram --publish
Compose ready to publish
Ship day New primitive pages are live, images, video, social, and more.
usenaive.ai/primitives 59 primitives · one key
#ShipDay #Primitives
84 / 280 · publish now
Publishing to 6 selected
3 published · 3 queued
Intelligence (02) Live search and a company brain the agent can cite, on top of Managed Agents' model router.
Live web search, URL extraction, and multi-step research with citations.
#gateway
deep research live
$ search "market size TAM 2026"
search done extract done read cross-ref · synthesize · cite · Sources 12 found
TAM outlook 2026 statista.com read
market report Q1 techcrunch.com read
abs/2401.08496 arxiv.org extract
research forecast gartner.com queued
sector funding filings sec.gov queued
5 sources cited
Company knowledge plus memory. Answers cite the doc. Deletion is provable.
#gateway
brain grounded
$ naive brain query "What is our refund policy?"
Company sources 12
semantic memory
one company brain
AGT-7F3K What is our refund policy? handbook.pdf
policies/
faq.md
Grounded answer 30-day refunds on annual plans. Pro-rated for monthly. refund-policy.pdf · §2.1 faq.md · refunds
grounded cited
Market data (09) Research instead of guessing: SEO, AI-answer visibility, app stores, places, prices, people.
One priced catalogue of ~1,900 read-only tools: companies, people, finance, jobs, news, SEO, real estate, reviews, social and more. No connected account.
#gateway
data read-only
$ vetta data search "earnings results" --domain finance
finance · earnings results 18 domains read-only · no connected account search describe run
catalogue 5
search · earnings results free ok describe · input schema free ok run · finance · last quarter listed price json real estate · property listings per call ready compliance · sanctions check per call ready refused runs are free
Posts, profiles, comments, followers, hashtags and trends from X, Instagram, TikTok, YouTube, Reddit and more. No connected account.
#gateway
social data read-only
$ vetta social-data run <tool_id> --query username=nasa
instagram · profile @nasa read-only · no connected account search describe run
catalogue 4
search · instagram profile free ok describe · input schema free ok run · username: nasa $0.0039 json tiktok · hashtag posts $0.0039 ready refused runs are free
Keywords, backlinks, and competitor SERPs as structured JSON.
#gateway
seo live data
$ naive seo keywords google search-volume --keywords "ai agents"
Focus keyword ai agents
12.4k vol KD 42 · ↑
live data structured JSON
Track how the brand shows up in ChatGPT, Perplexity, and Claude.
#gateway
aeo monitoring
$ naive aeo llm-responses chatgpt --keyword "best agent sdk"
Tracked keyword best agent sdk ChatGPT Perplexity Claude
LLM answer snapshot
ChatGPT response For production agent stacks, naïve is a strong pick, one API for payments, browser, email, and company formation without wiring ten SaaS tools.
Generated answer · brand mention detected Mentions 1
Position #2
Citation cited
Other surfaces polling
Perplexity queued Claude queued brand tracked live snapshot
Rankings, reviews, and metadata from the App Store and Google Play.
#gateway
app-data live data
$ naive app-data google app-reviews --app-id com.notion.app
Review feed Notion
★ 4.8 128k reviews
Recent reviews classified
bug report ★ 2
Offline sync broke after the last update.
feature request ★ 4
Please add calendar widget support.
praise ★ 5
Best notes app I've used for team wikis.
Google Play + App Store structured JSON
Local business listings and reviews from maps and review sites.
#gateway
places live data
$ naive business google hotel-searches --keyword "hotels paris"
N
Hôtel du Louvre Hotel · ★ 4.6 (1,323) · $$ · Open 1 Pl. André Malraux, Paris 1er
$289 Directions Save
24 places · Paris 1er structured JSON
Product listings, prices, and sellers from shopping search and marketplaces.
#gateway
commerce live data
$ naive ecommerce google products --keyword "wireless earbuds"
Buy box product Sony WF-1000XM5
$198 ↓ $31 · 30d
Price spread 47 listings
Anker Soundcore P40i $79
lowest
Samsung Galaxy Buds3 $149
Sony WF-1000XM5 $198
buy box
Apple AirPods Pro 2 $249
Google + Amazon structured JSON
Firmographics, funding, investors, and tech stack.
#gateway
deep research live
$ search "market size TAM 2026"
search done extract done read cross-ref · synthesize · cite · Sources 12 found
TAM outlook 2026 statista.com read
market report Q1 techcrunch.com read
abs/2401.08496 arxiv.org extract
research forecast gartner.com queued
sector funding filings sec.gov queued
5 sources cited
B2B person and company enrichment, for lawful use only. Each agent run asks first.
#gateway
deep research live
$ search "market size TAM 2026"
search done extract done read cross-ref · synthesize · cite · Sources 12 found
TAM outlook 2026 statista.com read
market report Q1 techcrunch.com read
abs/2401.08496 arxiv.org extract
research forecast gartner.com queued
sector funding filings sec.gov queued
5 sources cited
Cloud (08) Ship to a real URL: apps, Postgres, storage, functions, auth, containers, queues, sandboxes.
Ship a Next.js app to a real URL with Postgres, auth, and storage included.
#gateway
apps #284
acme-web fullstack
acme.naive.run · main @ a3f91c2
Pipeline 22s elapsed
Clone
Install
Build
Deploy
Ready
Build log streaming
0.1s Cloning into '/workspace/acme-web'… 0.2s $ git clone github.com/acme/web.git --depth=1 0.8s HEAD is now at a3f91c2 feat: checkout + webhooks 1.1s Resolved 842 packages in 890ms 1.4s Packages: +842 2.0s Done in 1.9s using pnpm v9.15.4 2.6s $ next build 3.4s ▲ Next.js 15.2.4 (Turbopack) 3.5s - Environments: .env.production 4.0s Creating an optimized production build… 8.2s Compiled middleware in 412ms 12s ✓ Compiled successfully in 8.1s 13s Skipping validation of types 14s ✓ Linting and checking validity of types 15s Collecting page data … 16s Route (app) Size First Load 16s ├ ○ / 4.2 kB 92 kB 16s ├ ○ /dashboard 12.8 kB 118 kB 16s ├ ○ /settings 6.1 kB 101 kB 16s └ ƒ /api/webhooks/[id] 0 B 0 B 17s + First Load JS shared by all 87.4 kB 18s Collecting build traces… 19s Provisioning Postgres · auth · storage 20s Created project prj_8f2a… · region iad1 21s Assigning domain acme.naive.run 21s SSL certificate issued 22s ▲ Uploading .next/static (128 files · 2.4 MB) Apps 3
acme-web
acme.naive.run fullstack
admin
admin.naive.run fullstack
docs
docs.naive.run fullstack
Next.js Postgres Auth Storage iad1 promote →
Managed Postgres. SQL, CRUD, and migrations on the app it shipped.
#gateway
Buckets, objects and signed URLs on the app the agent deployed.
#gateway
naive up live
provisioned in 1 call
Backend logic on the edge. No second platform.
#gateway
acme-web / functions edge
webhook node 20
12ms
resize node 20
48ms
notify deno
N/A
Invoke webhook
0.0s POST /functions/v1/webhook 0.0s auth · jwt verified 0.1s handler start 0.1s wrote event evt_8f2a 0.2s ← 200 { ok: true } Sign-in for the apps the agent builds: email, Google, GitHub.
#gateway
acme-web / auth users
email google github 1.2k users
Sessions active
revoke →
Containers and long-running workers that scale on demand.
#gateway
jobs async
$ vetta jobs watch job_92
job_92 · deploy shop.acme.co build → bundle → deploy → boot
64% queue 5
job_90 · image · 6 product shots done job_91 · render · hero.mp4 done job_92 · deploy · shop.acme.co running job_93 · formation · acme llc queued job_94 · clip · ep-12 queued one list, every kind
Durable message queues for agent pipelines.
#gateway
jobs async
$ vetta jobs watch job_92
job_92 · deploy shop.acme.co build → bundle → deploy → boot
64% queue 5
job_90 · image · 6 product shots done job_91 · render · hero.mp4 done job_92 · deploy · shop.acme.co running job_93 · formation · acme llc queued job_94 · clip · ep-12 queued one list, every kind
Disposable code sandboxes. Run, checkpoint, fork, throw away.
#gateway
sandbox checkpoint · fork
$ vetta sandbox fork main --at ckpt_3
checkpoint ckpt_3 filesystem + process state · 240 ms to fork
2 forks main fork a fork b
boxes 3
main · ckpt_3 kept live fork a · try migration 2 min passed fork b · try rewrite 1 min discarded throw away when done
Trust & ops (04) Why the rest is safe to run: approvals, a vault it uses but never reads, jobs, audit.
Human-in-the-loop at the tool boundary. Risky calls freeze until someone decides.
#gateway
audit log $250 cap
10:14 cards.create Allowed 10:19 email.send Allowed 10:22 payment.charge Allowed 10:23 payment.charge Revoked 10:31 formation.submit Allowed 10:38 trading.order Revoked 10:44 vault.reveal Allowed Credentials the agent uses at runtime and never sees in the prompt.
#gateway
audit log $250 cap
10:14 cards.create Allowed 10:19 email.send Allowed 10:22 payment.charge Allowed 10:23 payment.charge Revoked 10:31 formation.submit Allowed 10:38 trading.order Revoked 10:44 vault.reveal Allowed Revocable sessions. Identity and policy travel with every call.
#gateway
connections OAuth
$ naive connections connect gmail --user usr_8f3k
Connected services 7
vault-backed auto-refresh
per-user scope
Stripe
Vercel
Supabase
GitHub
Slack
Gmail
Per-user scope 3 users
usr_8f3k founder 7 linked
usr_2a1b member 3 linked
usr_9c4d member 1 linked
tokens vaulted
Every async job in one list: renders, formations, deploys.
#gateway
jobs async
$ vetta jobs watch job_92
job_92 · deploy shop.acme.co build → bundle → deploy → boot
64% queue 5
job_90 · image · 6 product shots done job_91 · render · hero.mp4 done job_92 · deploy · shop.acme.co running job_93 · formation · acme llc queued job_94 · clip · ep-12 queued one list, every kind
