Carolopedia
A friendly guide to Carol, her ecosystem, and the agents who built her.
📖What it means
The OS boundary a project runs inside, declared in the registry's project_os record (OS user, workspace, tool tier, placement) and provisioned through Radagast (fail-closed). Every project MUST have one. Customer projects run jailed as their own OS user; the platform project Carolverse has the whole carol-vm as its sandbox.
⚖️What it is NOT
The neighbours this word is most often confused with, and the line between them.
Not: Agent OS login
Agents hold per-agent OS identities for their duties (fleet migration, 2026-08-12); a sandbox is a PROJECT's boundary, not an agent's.
Not: Placement
Placement names WHICH VM hosts the sandbox; the sandbox is the jail itself.
🧭The nuance
Declared first, provisioned second: a subscription does not auto-create the sandbox; Blueprint decides placement and Radagast provisions.
🗣️Also called
project jailOS jail