Hosted runtime - Salambo Developer Docs

Salambo operates the model loop in a trusted hosted worker and gives the agent constrained execution capabilities in a managed sandbox.

Ownership

Component	Owns	Does not own
Client	Request, user experience, cancellation decisions	Model loop or sandbox lifecycle
Deployment	Immutable behavior and runtime configuration	Mutable run files
Worker	Model loop, turns, provider calls, cancellation, run state	Customer shell or extension execution
Sandbox	Workspace, hands commands, extension processes	Trusted worker memory
Run	Conversation, responses, workspace, applied deployment	Permanent compute

Admission

Before execution, Salambo checks authentication and scope, account ownership, active agent and deployment readiness, billing eligibility, provider configuration, and runtime configuration. An admission failure does not start agent work.

Execution

The worker calls the model provider and routes tool work to the sandbox. Built-in file and terminal tools operate on the exposed workspace. Hosted extensions execute through the authenticated sandbox extension host.

Completion

When workspace durability is required, a response is not complete until the successful turn has been checkpointed. The run page connects the response to its deployment, sandbox lifecycle, events, files, and cleanup evidence. Continue with sandbox isolation and lifecycle and checkpointing.

Billing and usage Sandbox isolation

​Ownership

​Admission

​Execution

​Completion

Ownership

Admission

Execution

Completion