Parity mvm

[breardon2011]

MIcro-VM Lite Path (dormant)

What

Adds the MicroVM "lite" data plane (tunnel-free, CP in-region) and per-org runtime routing. Dormant on merge — no existing org or cell changes behavior.

Gates default off: OPENSANDBOX_MICROVM_LITE != "1" (backend never registered), OPENSANDBOX_CREATE_TRACE != "1", and orgs.runtime defaults '', which only workerBackend accepts → QEMU, as today. Migration 055 is additive (DEFAULT ''), auto-applied on CP boot.

What is NOT dormant

Three changes hit the QEMU fleet prod-wide.

1. API-key validation is memoized (internal/auth/apikey_cache.go). Every authenticated request cost two Postgres round trips — a SELECT plus an inline UPDATE last_used — in front of the handler. Dev, burst-100:

	before	after
create p50	345.7ms	152.6ms
exec p50	459.5ms	124.1ms
TTI p50	867.0ms	279.1ms

Server-Timing read auth=309ms on create, 429ms on exec, while the handler (tot) was 0ms.

Tradeoff: a revoked API key keeps working up to 30s. OPENSANDBOX_APIKEY_CACHE_TTL_MS tunes it; 0 disables the cache.

2. last_used updates in a background goroutine, not on the hot path.
3. pgxpool MinConns 5 → 20, so a burst stops stampeding connection setup.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
opencomputer	🟢 Ready	View Preview	Aug 27, 2026, 10:33 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.