ai-gov: approval-required network access - #26059
Draft
craig-osterhout wants to merge 2 commits into
Draft
Conversation
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
✅ Deploy Preview for docsdocker ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This was referenced Sep 10, 2026
craig-osterhout
requested review from
chrispatrick,
derekmisler and
smnovick
September 10, 2026 18:31
|
|
||
| ### A request is blocked with "Approval required" | ||
|
|
||
| The destination is allowed by an organization policy that requires approval. |
Contributor
There was a problem hiding this comment.
This is only half the story. Orgs can require approval, but also when operating ungoverned, network requests that do not match any rules and are implicitly denied will also ask for approval.
| List the destinations waiting for a response: | ||
|
|
||
| ```console | ||
| $ sbx policy approval ls |
Contributor
There was a problem hiding this comment.
The user will also be able to use the sbx companion app (the UI stuff that appears in the system tray) to list and approve requests.
Contributor
|
This is currently behind a FF, so we will need to coordinate publication of the docs. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Document approval-required network access. An organization network policy can
require a developer to confirm each destination before a sandbox reaches it.
Split from #26051. The HTTP method and path rules are in #26060, which is
branched off this PR and merges after it.
network.mdsbx policy approvalworkfloworganization.mdconcepts.mdlocal.mdmonitoring.mdRelated issues or tickets
ENGDOCS-3373
Reviews