Quartermaster

Hire a coding agent like a contractor: it never holds your keys, and it only gets paid for work it can't fake.
Keys held by agent
–
real secrets live only in the proxy
Reachable from agent
–
egress allowlist
Payment
–
manual capture
Hidden checks
–
critical · normal
Verifier fork
–
from sealed operator base
Run Card
–
hash chain

Live run

Site map

Agent VM
keyless · sentinels only
Credential proxy
holds real secrets
NeonResendStripe
Verifier
fork of sealed base · no network

Requisitions · Stripe Projects

guardrails: –
none yet

Settlement

$0.00
no PaymentIntent yet

The 5 sandbox questions

What can the process read?
/workspace + placeholder env
Network off per run?
–
CPU / memory / time limits?
2 vCPU · 4 GB · 300 s/command · auto-pause
What do you get back on failure?
host-authored Run Card, replayable
Credentials scoped to the run?
–