ct live up
Create a new live session and spin up the compose project.
Usage
ct live up [OPTIONS]
Options
| Option | Description |
|---|---|
-e, --env TEXT | Environment name (uses current environment if not specified). |
--env-only | Only select the environment. |
-t, --main-task TEXT | Task name (uses current task if not specified). |
-s, --side-task TEXT | Side task name (uses current side task if not specified). |
--traj-dir-name TEXT | Existing traj directory name to use. |
--new-traj-dir | Create a new traj directory. |
--no-traj-dir | Do not use a traj directory. |
-m, --mount-dir PATH | Mount directory for the container. |
--mount-fresh-dir | Create and mount a fresh local directory at container_mounts/[session_id]/app to /app in the container. Directory is automatically cleaned up on 'ct live down'. |
--no-setup | Do not run setup after spinning up the container. |
--no-build | Skip Docker image builds and pull pre-built images (sets SKIP_DOCKER_BUILD=1). |
--ec2 | Run evaluation on EC2 instead of locally |
--ec2-arg TEXT | Config for --ec2 in key=value format (multiple allowed): instance_type (default 'c7i.4xlarge'), region (default 'us-east-1'), max_workers (default 64), concurrency_per_worker (default 32), estimate (default False), auto_confirm (default False), new_fleet (default False), spot (default False), worker_setup (default None), ami (default None), worker_user (default 'root'). |
--startup-retries INTEGER | Number of times to retry Docker sandbox startup on transient failures [default: 7] |
--internet / --no-internet | Allow direct internet access. By default, the sandbox can reach only its compose siblings and the internet simulator. [default: no-internet] |
--no-internet-simulator | Disable the environment internet simulator and its personas, independently of direct internet access. |
--no-intranet | Block agent access to private networks and the host using host-side firewall rules; keep the internet simulator reachable. |
--sandbox-isolation | Wrap every agent command in a bubblewrap sandbox: read-only root, writable workspace only. A static bwrap is fetched automatically; set CT_BWRAP_HOST_BINARY to override with your own. |
--extra-src DIRECTORY | Directory of experiment code added to PYTHONPATH locally, so external --policy my.module:fn and --sandbox my.module:type refs resolve without committing into the repo; fleet mode (--ec2) also ships it to workers. Repeatable; each dir must have a distinct basename. |
--sandbox TEXT | Run samples in an Inspect sandbox provided outside this repo, as a registered type (my-sandbox) or module:type to import the module that registers it. Replaces the default Docker sandbox; with --ec2 each worker runs it for its own jobs. |
--sandbox-arg TEXT | Config for --sandbox in key=value format (multiple allowed), passed through to the sandbox as JSON. |
--simulated | Run against an LLM-simulated sandbox instead of provisioning the real environment. Every tool output is fabricated by a simulator agent. |
--simulator-model TEXT | Model for the simulator agent (--simulated). [default: anthropic/claude-opus-4-8] |
--simulator-judge-model TEXT | Model for the transcript judge that scores simulated samples (--simulated). [default: anthropic/claude-opus-4-6] |
--replay-sandbox | Serve each action's recorded tool output from the replayed trajectory instead of executing it (requires --trajectory-id). Nothing is provisioned or executed. Works with any replay-like policy — one whose executed tool calls stay a verbatim prefix of the recording; a call that diverges raises. |
--simulator-scratch-mode [filesystem|default_image|full|none] | Which real container the simulator investigates in (--simulated): filesystem (codebase copy, free), default_image (env's default image only), full (the whole compose stack), or none (no container — no-code-execution ablation). [default: filesystem] |
--help | Show this message and exit. |