Filesystem access

Read, write, inspect, and transfer files through the sandbox data plane.

Filesystem operations use the short-lived data-plane credential, not a separate Edge proxy. This keeps high-volume agent traffic close to the runtime while Edge remains the control plane.

Use snapshots for durable checkpoints and volumes for data that must outlive an individual sandbox.