Default Policy Reference
The default policy is the policy applied when you create an OpenShell sandbox without --policy. It is baked into the community base image (ghcr.io/nvidia/openshell-community/sandboxes/base) and defined in the community repo’s dev-sandbox-policy.yaml.
Agent Compatibility
The following table shows the coverage of the default policy for common agents.
If you run a non-Claude agent without a custom policy, the agent’s API calls are denied by the proxy. You must provide a policy that declares the agent’s endpoints and binaries.
Default Policy Blocks
The default policy blocks are defined in the community base image. Refer to the openshell-community repository for the full dev-sandbox-policy.yaml source.