> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/openshell/_mcp/server.

# Policies

## Docs

- [Sandbox Policies](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/overview.md): Understand what sandbox policies control and where a sandbox's policy comes from.
- [Network Rules](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/network-rules.md): Understand how OpenShell evaluates network rules, and adapt examples for REST APIs, package registries, internal services, WebSocket, GraphQL, MCP, and native TCP.
- [Manage Sandbox Policies](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/manage-policies.md): Use the OpenShell CLI to set, inspect, change, verify, and roll back sandbox policies, apply a global policy, and troubleshoot policy problems.
- [Policy Prover](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/prover.md): Understand how OpenShell uses the policy prover, and check that a policy grants no more access than a boundary policy you define.
- [Policy Advisor](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/advisor.md): Let an agent in a sandbox propose the network rule it needs when OpenShell blocks a request, and control which proposals take effect.
- [Default Policy and Baseline Paths](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/default-policy.md): The restrictive fallback policy used when a sandbox has no explicit or embedded policy, and the baseline paths OpenShell adds to sandbox policies.
- [Policy Schema Reference](https://docs.nvidia.com/openshell/v0.1.2/how-it-works/policies/schema.md): Fields, defaults, and constraints for the sandbox policy schema.