Skip to main content
Starts two listeners: the agent on listen:agent_port (default 127.0.0.1:4700) and the sandbox on listen:sandbox_port (default 127.0.0.1:4600). Both share data_dir and fail independently. The spec watcher runs inside up for every upstream with a spec_source. Runs until SIGINT or SIGTERM, then drains for three seconds.

Output

Before serving, up lints every volatile_fields entry against what has been learned and prints any dead, stable or over-broad entry. See Volatile fields.

Refuses to start when

  • upstreams is empty.
  • listen is not loopback and no token is configured.
  • A sandbox has a webhook sink and its spec declares a signature, but the environment variable the envelope names is unset.
  • A volatile_fields entry is malformed.
  • The salt, the token file, or a config file holding a model key is readable by other users.
Every refusal names the fix. See Troubleshooting.