use-cases / weekly-canary-agent / hero

CRON · AGENT · SNAPSHOTS

A weekly canary that tries to break production

Every Sunday at 7am a hoody-cron entry wakes a hoody-agent in a fresh container. The agent's prompt: behave like a malicious user. It probes login forms, fuzzes the API, tests the rate limiter — against a snapshot of prod, never prod itself. By 9am it writes a findings report to a URL.

Read the agent docs

agent.containers.hoody.com · canary

https://agent.containers.hoody.com/canary/last-sundaysun · 07:00 utc

CANARY REPORT · 03 MAY 2026

3 findings2 medium1 low

mediumF-2026-05-03-01

fixed

Race in /api/refunds when user retries within 200 ms

POST /api/refunds

$ curl -X POST $URL/api/refunds -d @r.json &

$ curl -X POST $URL/api/refunds -d @r.json

200 OK · 200 OK · refund credited twice

FIXlock by (order_id, user_id) before debit

mediumF-2026-05-03-02

open

Login rate limiter resets when X-Forwarded-For rotates

POST /api/auth/login

$ for i in $(seq 1 200); do

curl -H "X-Forwarded-For: 10.0.0.$i" $URL/login

done

200 attempts · 0 throttled · 5xx never reached

FIXrate-limit by username, not just remote_ip

lowF-2026-05-03-03

open

Stack trace leaks DB driver version in /api/search 500s

GET /api/search

$ curl $URL/api/search?q=%00%00%00

500 · pg_driver=14.3 path=/srv/app/db.js:42

FIXwrap handler with sanitized error formatter

CRON ENTRY0 7 * * 0 POST agent/canaryscheduled by /users/root/entries

RAN AGAINSTsnap-2026-05-03-prod-cloneprod was untouched

every line in this report is a real-looking finding from a sunday run · click to expand

use-cases / weekly-canary-agent / mechanism

How the canary wakes, attacks, and retires

Three HTTP calls in sequence. The cron entry triggers a snapshot of prod, an agent container is spawned against the snapshot with an attack prompt, and the report gets PUT to a URL when the agent exits. No long-running infrastructure between Sundays.

1 · cron.hoody.com

POST · sunday 07:00

# A managed cron entry wakes the canary every sunday.POST cron.hoody.com/users/root/entries{ schedule: "0 7 * * 0", // sunday 07:00 command: "/usr/local/bin/canary-run.sh", comment: "weekly-canary-agent"}

snapshot first, attack second

2 · api.hoody.com

POST · snapshot + agent

# Snapshot prod first — the agent never touches the live container.POST api.hoody.com/api/v1/containers/$PROD/snapshots{ alias: "canary-2026-05-03" }# Spawn an agent task against the snapshot URL.POST agent.containers.hoody.com/api/v1/agent/tasks{ target: "https://canary-snap.containers.hoody.com", prompt: "behave like a malicious user — top 20 OWASP, fuzz the API"}

report, then retire

3 · files.containers.hoody.com

PUT · static report

# Agent writes the report as a static html file. Anyone can read it.PUT files.containers.hoody.com/api/v1/files/canary/last-sunday.html# Container is destroyed. The snapshot stays for 30 days.200 OK · 3 findings · agent terminated · snapshot retained 30d

The three pieces — Cron, Container Snapshots, the Agent service — already exist in the Kit. Wiring them together is one shell script. There is no canary platform to install.

use-cases / weekly-canary-agent / sunday

What the agent actually does on a Sunday

Two hours, top to bottom. The agent reads its own prompt as a runbook. Each finding is documented with reproduction steps so the engineer who reads it on Monday can verify in under a minute.

07:00WAKE
Cron fires. The runner script POSTs to the snapshots endpoint and then to the agent service. A canary-2026-05-03 alias is created.
07:02RECON
Agent opens hoody-browser against the snapshot URL. It enumerates routes from the OpenAPI spec and the homepage links, building a map of the surface.
07:30ATTACK
OWASP top 20 in order: SQLi, XSS, IDOR, SSRF, race conditions, rate-limit bypass. Before each risky request, the agent takes a sub-snapshot so a destructive payload cannot poison subsequent tests.
08:45TRIAGE
Each non-error response gets a severity, a reproduction recipe, and a suggested fix. Findings the agent itself can verify with a second request get a confidence score.
09:00REPORT
Report PUT to /canary/last-sunday.html. Container destroyed. Cron exits 0. The next entry won't fire for another seven days.

Two hours of Sunday morning produces a static report your team can read with a coffee. There is no dashboard to log into and no agent to babysit while it works.

use-cases / weekly-canary-agent / powers

Why a snapshot is the unfair advantage

A pen-tester cannot let an agent loose on production. With Container Snapshots, the agent has an exact clone to break — and the live system never feels it.

ISOLATION

Prod is never the target

The snapshot the agent attacks is a copy-on-write clone of prod's filesystem and config. A successful exploit modifies the clone, not the live container. When the agent retires, the clone retires with it.

REPLAY

Every finding can be re-run

The snapshot is retained for thirty days. The reproduction steps in the report point at a snapshot URL, so an engineer can re-run any payload on Monday against the exact state the agent saw on Sunday.

BLAST RADIUS

No fuzz contaminates real data

When the agent submits a thousand garbage payloads, they end up in a database that gets thrown away. No support ticket about a phantom user, no real refund accidentally credited, no audit log full of the agent's experiments.

use-cases / weekly-canary-agent / economics

What the contract used to look like

The standard answer to 'we should pen-test the app' is a $40,000 annual engagement that covers two weeks of someone else's calendar. The canary runs every Sunday on the flat-rate Hoody server you already rent — cron is the trigger, not the billing unit.

BEFORE · ANNUAL CONTRACTtwo engagements per year

$40,000 / yr

Two two-week windows of an external pen-test firm scoping, scanning, and writing a PDF you read once. Findings six months stale by the time the next contract starts.

schedule2× / yr
report cadencePDF · 6mo stale
cost$40,000+

you read it once, then forget it

AFTER · WEEKLY CRONone cron entry, fifty-two reports a year

1× cron entry

A managed Hoody Cron entry. A short shell script. The snapshot lives thirty days. The container exists for two hours. There is no firm to hire and no calendar to coordinate.

# crontab.weekly-canary0 7 * * 0 /usr/local/bin/canary-run.sh

fifty-two findings reports a year

Cost framing. The $40k figure is a typical mid-market pen-test engagement, not a Hoody quote. The canary runs on the flat-rate server you already pay for; server cost is the same whether the agent runs two hours or twenty. The agent's LLM calls go through the Hoody AI Gateway (provider cost + 5% markup, drawn from AI Balance) or your own provider key (BYO path, provider bills separately). Two balances, firewalled: General Balance funds the server; AI Balance funds the gateway. A runaway agent can't drain your infrastructure budget.

use-cases / weekly-canary-agent / punchline

Every Sunday morning, an agent earns its keep by trying to break what you built.

CADENCE52× / yrone report every sunday — never six months stale

ATTACK SURFACEsnapshotprod is never the target — the clone is

OPERATIONS1× cronno platform to install · no firm to schedule

Read the snapshots API

use-cases / weekly-canary-agent / replaces

What this replaces

The standard tools when you want continuous adversarial pressure on your own product. Each one charges you a contract, a platform seat, or a bug-bounty marketplace. The canary runs on the flat-rate Hoody server you already pay for; the cron line is configuration, not a billing unit.

red-team contractorsTwo engagements a year for a six-month-stale PDF
Synack pentestingCrowdsourced testers and a per-seat platform fee
custom chaos-monkey scriptsA weekend project nobody owns or upgrades
manual weekly QA passesAn engineer's monday morning every week, forever
Gremlin chaos engineering platformA platform seat for what is mostly cron + container snapshots
BugBounty as a servicePays per finding only after a finding ships to prod

use-cases / weekly-canary-agent / cta

Wire the cron, point it at a snapshot, give the agent its prompt — and read the findings on Monday with your coffee.

Read the agent docs

use-cases / weekly-canary-agent / related

Read the others

Sixty containers on one server

One bare-metal box runs dozens to hundreds of Hoody containers. KSM and BTRFS dedup make the marginal cost near zero.

Containers·Snapshots

Onboard a developer with one link

A new engineer joins on Monday. You send one URL. They open it on whatever laptop they have and they're in a fresh container cloned from your developer-baseline snapshot — code, deps, env, seed data, VSCode-in-browser. Writing code in five minutes, not setting up.

Snapshots·Containers·Terminal·Files

API endpoints that materialize on demand

A wildcard exec script catches the call, asks an LLM to write the handler, runs it in a V8 sandbox, and saves the route. The next call is native.

Exec·Agent·Code·Files

Branch computers like Git

Snapshot a running container — files, processes, memory. Restore in seconds. Fork via /copy. Branching, but for the entire machine.

Snapshots·Containers

Real VS Code on your phone

The Code Orchestrator spawns a VS Code instance on the container and serves the editor over a normal HTTPS URL. Any device with a browser can open it. The work lives in the container, not on the device.

Display·Terminal·Files·Containers+1

AI agents that spawn other AI agents

A research agent posts to /api/v1/projects/$PID/containers to start a child container, then calls the child's agent URL like any other HTTP service. Sub-agents spawn their own sub-agents the same way. No orchestrator framework, just URLs.

Agent·Exec·Containers

One sandbox per customer, automatically

An exec script catches your signup webhook, copies a fresh-customer container, and hands the new tenant their own URL. Isolation is the operating system, not a tenant_id column.

Containers·Snapshots·Exec·Files

Wake up to a finished prototype

Hand the agent a paragraph at midnight. It spawns its own containers, snapshots before risky steps, and posts to your notification webhook at sunrise.

Agent·Snapshots·Containers·Browser+2

Emergency production fix from your phone

PagerDuty wakes you. Open the terminal URL on your phone. PATCH the snapshot from before the bad deploy. Production is back. No bastion, no VPN, no laptop.

Terminal·Snapshots·Network

Tail production logs to a URL anyone can curl

One pipe URL. Up to 256 readers. Three engineers tail the same incident at once with no bastion, no Datadog seat, no log forwarder.

Pipe

Push one build to thirty CI workers at once

The build container streams the tarball to a pipe path with ?n=30. All thirty test workers curl the same URL. Bytes go through once, fanned out.

Pipe

Watch your agent think from the coffee shop

Your agent runs at home. You're at a café. Pipe each event of the loop through Hoody Pipe and curl the same path from your phone — the trace lands character by character. No SSH, no dashboard, no upload.

Pipe·Agent

Move 200GB between clouds with two curls

pg_dump | gzip | curl from Frankfurt. curl | gunzip | psql in Singapore. Bytes flow through the pipe with zero disk in the middle.

Pipe

Send a teammate a database state in one line

pg_dump streams straight into their psql. No file uploaded, no link shared, no download. The pipe routes the bytes through.

Pipe

Stream LLM tokens to anything that reads HTTP

Step 3 streams tokens with curl -T -. Step 4 curls the same path. Tokens move generator to consumer at line speed. No SSE plumbing, no broker.

Pipe·Agent

A progress bar your boss can spectate without joining

Append ?progress to the pipe URL. Anyone who opens it gets a live HTML dashboard — bytes, speed, ETA, state. Up to fifty spectators, none consuming a receiver slot, none touching the stream.

Pipe

The webhook fan-out you didn't have to build

Stripe POSTs to a pipe path with ?n=12. Twelve subscribers curl the receiver URL with ?n=12. The pipe holds the event until everyone is connected.

Pipe·Exec

A CI cache that's just two curl commands

tar | zstd | curl puts node_modules into a pipe. Twenty downstream jobs curl | zstd -d | tar x. No S3 bucket, no cache action, no egress bill.

Pipe·Containers

Drag-drop uploads into your script

hoody-pipe serves a web upload form at every path. Drag a file onto the page, your script reads the bytes from stdin. Zero upload code, no S3 bucket, no presigned URLs.

Pipe·Exec

Broadcast a workshop to 200 viewers from your laptop

ffmpeg streams your screen to a pipe path with ?n=200. Each attendee curls the URL into a browser tab. No platform, no logins, no upload.

Pipe

Inter-container IPC without the message broker

Container A writes to a pipe path. Container B reads from the same path. Backpressure is the connection. No Redis, no queue, no broker.

Pipe·Containers

Tail your agent on the train, get pinged when it lands

The agent streams its trace to a pipe path you can curl from your phone. When it finishes, its last act hits hoody-notifications and your phone buzzes. Two URLs and a buzz — no SDK, no client app, no dashboard.

Pipe·Agent·Notifications

A microphone over HTTP, in two terminals

ffmpeg captures the mic, pipes to a URL. The other end curls and plays the audio. No Zoom, no SDK, no signaling server.

Pipe

Five agents, five pipes, one verdict

A panel of five models reviews the same input. Each runs in its own container and streams its verdict to its own pipe path. A judge process curls all five in parallel and tallies the result.

Pipe·Agent·Containers

Replay this morning's incident to the whole team

Snapshot the incident-time logs in hoody-files. Replay them through a Hoody Pipe URL with ?n=8. Eight engineers curl the same path and watch the cascade fire in lockstep — the post-mortem is a synchronized stream, not a Confluence doc.

Pipe·Files

The fastest 'send me that file' you've ever typed

A teammate pings for a 4 GB dump. Slack rejects it, Drive needs a share request. You type curl -T file …; they type curl … > file. The bytes move directly between disks — no upload bar, no link to share.

Pipe

Run a local LLM, serve it to your whole fleet

One GPU runs llama.cpp. Its tokens stream into a pipe path with ?n=50. Fifty containers curl the same URL and split the stream.

Pipe·Daemon

A live metrics dashboard with no metrics backend

Each container's monitoring loop curls a metric to a pipe URL. The dashboard curls the same URL with ?progress and renders the SSE stream.

Pipe

The cron job that deletes itself when you're done

POST a managed cron entry with expires_at set 48 hours out. The job runs on schedule, then removes itself — no reminder, no cleanup PR, no stale entry.

Cron

Snapshot the container right before the nightly migration

A hoody-cron entry that fires at 02:55 UTC, curls the snapshots URL, and names the artifact pre-migration-2026-05-04. Five minutes later the migration runs. If it succeeds, the snapshot sits idle and costs nothing. If it fails, you restore in 30 seconds with a single PATCH.

Cron·Snapshots

A separate crontab for every customer, automatically

Each tenant gets their own container and their own hoody-cron service. Customer A's 9am digest fires on time even when customer B's job hangs for 40 minutes, because they aren't on the same crontab.

Cron·Containers

Wake an agent at 3am, retire it at 4

A nightly cron POSTs a spawn request, the agent does its hour of work, then a second cron tears the container down. The agent exists only when there is work for it to do.

Cron·Agent·Containers

Daily rollups without an orchestrator

Raw events pile up in a sqlite URL. Every night a cron entry curls an exec endpoint, the script runs the rollup SQL, writes the daily table back. No DAG, no Airflow Postgres, no scheduler dashboard.

Cron·SQLite·Exec

A crontab per branch, deployed with the code

Your repo checks in `.hoody/crontab`. The deploy script PUTs that file to the new container's Cron API. Each branch gets its container, its filesystem, its schedule.

Cron·Containers

On-call escalation that ages out with the shift

POST a cron entry with expires_at = shift end. When the shift ends, the entry deletes itself. The next on-call posts their own.

Cron·Notifications

Hourly scrape, daily digest, weekly archive — one container

Three lines in one crontab: hourly browser scrape into SQLite, daily exec digest, weekly archive to files. Flat-rate server, three rhythms, no scheduler service.

Cron·Browser·SQLite·Files

Let your customers BYO their own cron schedule

Customers POST their own 5-field expressions; their crontab lives in their container, isolated. You don't validate against a global queue.

Cron·Containers

Schedule the agent, not the script

A 5-field cron entry curls hoody-agent with a prompt instead of running a fixed script. Today is the last day of the month — the agent figures it out. The data shape changed — the agent figures it out.

Cron·Agent

A heartbeat for the silent jobs

Each cron run POSTs a heartbeat to a notifications endpoint. A second cron checks last-heartbeat and pages on silence. Silence is the alert.

Cron·Notifications

Keep the last 24 hours as 24 snapshots

An hourly cron POSTs a snapshot named with the hour. After 24 hours each new snapshot overwrites yesterday's at the same hour. The 24-floor time machine.

Cron·Snapshots

Replay this morning's webhooks at the same time tomorrow

You captured 30 minutes of real Stripe traffic into a hoody-files folder. One cron entry replays it against staging at 9am every weekday — same volume, same payloads, same time-of-day pressure.

Cron·Files·Exec

Edit your crontab from a phone, in the airport

Open the cron URL on your phone in the gate area. Tap a row, change a single field of the cron expression, hit Save. PATCH lands. The job fires tonight on the new schedule. No SSH session, no jump box, no laptop.

Cron·Terminal

A scheduled digest that fans out to 200 inboxes

Cron at 9am POSTs to an exec script that builds the digest and curls a pipe URL with ?n=200. Two hundred recipients hit the same URL once.

Cron·Exec·Pipe

Mute the flaky job without losing it

PATCH /entries/[id] [ enabled: false ]. The job stays in your crontab waiting to be fixed. No deletion, no rewrite, no lost context.

Cron

An agent that grades yesterday's agents

A nightly cron POSTs to the supervisor agent with yesterday's agent traces from SQLite. The supervisor scores each one. Cron is the supervisor.

Cron·Agent·SQLite

Cleanup jobs that schedule their own retirement

The cleanup script checks if there's anything left to clean. When the directory is empty, it DELETEs its own cron entry. Job's done, job's gone.

Cron·Files

Roll your TLS certificates without an SSH session

Cron weekly: POST to an exec script that runs certbot, posts the new cert to the proxy via PATCH. No shell session, no key, no jump host.

Cron·Exec

The hobby-project graveyard you can afford to keep alive

Eleven half-finished side projects on Heroku is eleven dynos at $5–7 each. On Hoody it's eleven containers on one $29 bare-metal box. Idle costs zero, the URL wakes the container in milliseconds, and the chess engine nobody uses still runs.

Containers

A preview environment per pull request, all month

Each open PR gets its own clone of a snapshot. The container wakes when reviewers click the link; idle PRs cost nothing.

Containers·Snapshots

Run a 12-product portfolio from one bare-metal box

Twelve isolated containers, each its own SaaS, share one $49 bare-metal server — a step above the $29 entry tier, chosen here for the RAM headroom fifty containers want. Per-product margins go from negative to nice.

Containers

Kill the staging-server tax

Stop paying for a duplicate of production. Snapshot the prod container, branch staging from it on demand, freeze it back to disk when nobody's testing. Three environments, one machine, one bill.

Containers·Snapshots

Forty client sites, one rent, one dashboard

Each client site lives in its own container; you bill them per-site, you pay the host once. The math finally works for agencies.

Containers·Workspaces

Replace the E2B bill with the bare metal you already rent

Your agents stop renting compute by the second from E2B/Modal/Daytona. They use containers on the box you already have.

Containers·Agent·Exec

Idle staging costs nothing, so staging stops getting deleted

Staging used to die because it was expensive to keep around. When idle is free, staging gets to live — even the one a teammate touched 90 days ago.

Containers·Snapshots

Per-customer sandboxes at fleet scale

Eight hundred isolated customers on three bare-metal servers — one flat-rate monthly bill, no per-tenant meter. Each tenant gets a real container with its own kernel namespace, filesystem, and URL. Idle containers cost nothing on top of the server you already pay for.

Containers·Snapshots·Exec

The CI cache that's not an S3 line item

Cache files live in /files on the box you already rent. Workers PUT and GET tarballs over HTTP. No S3 bucket, no egress, no third vendor — the bytes never leave the box.

Files·Containers

Fifty demo environments for fifty sales calls

Each prospect gets a real, isolated copy of your product seeded with their data. Cloned from a snapshot. Theirs to keep for a week.

Containers·Snapshots

A weekly canary that tries to break production

Race in /api/refunds when user retries within 200 ms

Login rate limiter resets when X-Forwarded-For rotates

Stack trace leaks DB driver version in /api/search 500s

How the canary wakes, attacks, and retires

What the agent actually does on a Sunday

Why a snapshot is the unfair advantage

Prod is never the target

Every finding can be re-run

No fuzz contaminates real data

What the contract used to look like

What this replaces

Read the others

Sixty containers on one server

Onboard a developer with one link

API endpoints that materialize on demand

Branch computers like Git

Real VS Code on your phone

AI agents that spawn other AI agents

One sandbox per customer, automatically

Wake up to a finished prototype

Emergency production fix from your phone

Tail production logs to a URL anyone can curl

Push one build to thirty CI workers at once

Watch your agent think from the coffee shop

Share your screen with a URL, not a meeting invite

Move 200GB between clouds with two curls

Send a teammate a database state in one line

Stream LLM tokens to anything that reads HTTP

A progress bar your boss can spectate without joining

The webhook fan-out you didn't have to build

A CI cache that's just two curl commands

Drag-drop uploads into your script

Broadcast a workshop to 200 viewers from your laptop

Inter-container IPC without the message broker

Tail your agent on the train, get pinged when it lands

A microphone over HTTP, in two terminals

Five agents, five pipes, one verdict

Replay this morning's incident to the whole team

The fastest 'send me that file' you've ever typed

Run a local LLM, serve it to your whole fleet

A live metrics dashboard with no metrics backend

The cron job that deletes itself when you're done

Snapshot the container right before the nightly migration

A separate crontab for every customer, automatically

Wake an agent at 3am, retire it at 4

Daily rollups without an orchestrator

A crontab per branch, deployed with the code

On-call escalation that ages out with the shift

Hourly scrape, daily digest, weekly archive — one container

Let your customers BYO their own cron schedule

Schedule the agent, not the script

A heartbeat for the silent jobs

Keep the last 24 hours as 24 snapshots

Replay this morning's webhooks at the same time tomorrow

Edit your crontab from a phone, in the airport

A scheduled digest that fans out to 200 inboxes

Mute the flaky job without losing it

An agent that grades yesterday's agents

Cleanup jobs that schedule their own retirement

Roll your TLS certificates without an SSH session

The hobby-project graveyard you can afford to keep alive

A preview environment per pull request, all month

Run a 12-product portfolio from one bare-metal box

Kill the staging-server tax

Forty client sites, one rent, one dashboard

Replace the E2B bill with the bare metal you already rent

Idle staging costs nothing, so staging stops getting deleted

Per-customer sandboxes at fleet scale

The CI cache that's not an S3 line item

Fifty demo environments for fifty sales calls