Guarantees
Last updated 2 November 2026
Machines are not open yet. These pages describe Machines as they will open; until then, a create answers region_not_offered (422), “Machines are not offered in any region yet.”
Read these before you put data or users on a Machine: what Tonbo promises, one line per topic, each with a short page of its own.
- Data guarantees: A commit to the Machine’s database is durable once
synced()resolves, whatever then happens to the Machine. Volumes are not offered yet, so nothing about them is a promise until they are. - Sleep guarantees: Synced database commits are there after every wake; memory, processes and the Machine’s disks never are.
- Request guarantees: A request reaches your program at most once, and a Machine is never put to sleep for being idle while one is in flight.
- Isolation guarantees: Each Machine has a virtual machine of its own: no other Machine can read its memory or disks.
- Network guarantees: Only HTTPS to its declared ports reaches a Machine, and it reaches the internet over IPv4.