Sandbox

Copy a command into a terminal. install.sh downloads the Linux host from Depot and checks the lot before installing. The running process does not receive a token. It prints a code — Accept it below. Sign-out does not kill a joined host. The host needs a container engine (Docker / Docker Desktop). On join the binary pulls its work image from depot.pinonpm.com (public lot, no registry login).

Linux

install.sh downloads the Linux host from Depot and checks the lot checksum before installing. The run line has no token — Accept the printed code on this page. Needs Docker. No registry login.

        
      

      
Windows

      
curl.exe the Windows binary (or Invoke-WebRequest with the same URL and Bearer header), then the same join flags. Needs Docker Desktop. No registry login.

      

        

        
      

      

    

  

  

    
Join requests

    
A host process prints a code at startup. Only a member can join a host: if you run that machine, enter its code here and the host is yours. A request can be accepted once a member has entered its code. If the host's member later leaves, it stops. Accept mints a standing token for that process. Sign-out does not rotate it. Several hosts may join one Org or one Project. Accept adds a host. Accept and replace ejects every host already on that domain, then adds this one.

    

      
      
    

    
pick an Org

  

  

    
Joined hosts

    
Each host is one sandbox process joined to an Org or a Project. An org join covers every project under that org. For every host and every engine this page shows last check-in, client, engines version, health state (healthy, draining, retired, stale, or over budget), current claim with a link to its card, and running agents against the ceiling — so you can tell which host is unhealthy and why without reading machine logs. It also shows what the running process itself reported (binary version, build commit, process start, last self-update), clearly labelled and kept apart from the latest published lot and from repo main, so you can see which build is making decisions.

    
Anyone with access can read this health view. Only an Owner can change host or engine state from here. Eject kills that host's token. Revoke stops a host's token, the agent bearers it holds, and the tickets for its work at once, and is written to the record below. Hosts that joined before a host belonged to a member say "needs to re-join". They keep working until the date you set here.

    

      
      
      
      
    

    

      
       minutes without a heartbeat
      
      
    

    

      
      
      
      
    

    

      
    

    

      
    

    
pick an Org

  

  

    
Agents

    
Revoke (an Owner only) stops an agent's token, every bearer a host holds for it, and its tickets at once. An agent no longer bound to any seat can be revoked by its id. New token lifts a revoke and shows the token once.

    

    

      
      
    

    
  

  

    
Revoked