Hosted tasks get their own sandbox.
Hosted work runs in an isolated sandbox made for that task, and Deixic Code can use the macOS or Linux sandbox on your laptop.
HostCredentials and leases stay here
Egress gatewayBlocks internal and metadata addresses
gVisor sandboxThe task runs here, from a pinned image
Isolated in the cloud
Each hosted session gets a fresh gVisor sandbox, walled off from every other task.
Credentials stay outside
Secrets never enter the sandbox, and outbound traffic goes through a gateway that blocks internal addresses.
Fenced in locally
Seatbelt on macOS and Landlock on Linux limit what a local run can touch.
A computer of its own
In a hosted sandbox Dex works a full desktop and browser, seeing the screen, clicking, and typing under the same approval policy.
Take the wheel
Watch Dex work the machine live in the app, take over when you need to, and hand control back.
The life of a hosted task
Shared by every surface.
Use it with Dex on every surface, alongside company context that existing agents read over MCP.