Sandbox
Copy a command into a terminal. install.sh downloads the Linux
host from Depot and checks the lot before installing. The running
process does not receive a token. It prints a code — Accept it below.
Sign-out does not kill a joined host.
The host needs a container engine (Docker / Docker Desktop).
On join the binary pulls its work image from
depot.pinonpm.com (public lot, no registry login).
Linux
install.sh downloads the Linux host from Depot and checks the lot checksum before installing. The run line has no token — Accept the printed code on this page. Needs Docker. No registry login.
Windows
curl.exe the Windows binary (or Invoke-WebRequest with the same URL and Bearer header), then the same join flags. Needs Docker Desktop. No registry login.
Join requests
A host process prints a code at startup. Accept mints a standing token for that process. Sign-out does not rotate it. Several hosts may join one Org or one Project. Accept adds a host. Accept and replace ejects every host already on that domain, then adds this one.
pick an Org
Joined hosts
Each host is one sandbox process joined to an Org or a Project. An org join covers every project under that org. Eject kills that host's token. Agents keep their own seat tokens until the host restarts and cannot remint.
pick an Org