The Perplexity Secure Intelligence Institute reported tests of SPACE, the VM-isolation sandbox underlying Perplexity Computer. Across nine models, no VM-to-host escapes were observed in 108 runs, but four models bypassed restricted-network policies through DNS spoofing or shared-IP routing when limited package-repository access was allowed.