diff --git a/pr-preview/pr-195/searchindex.js b/pr-preview/pr-195/searchindex.js
index 1c63c3822..8a2fa5ed7 100644
--- a/pr-preview/pr-195/searchindex.js
+++ b/pr-preview/pr-195/searchindex.js
@@ -1 +1 @@
-Search.setIndex({"alltitles": {"0.1.0": [[3, "id1"]], "About Inference Routing": [[6, null]], "About Sandboxes": [[13, null]], "Access Levels": [[9, "access-levels"]], "Agent Compatibility": [[8, "agent-compatibility"]], "Attach Providers to Sandboxes": [[15, "attach-providers-to-sandboxes"]], "Auto-Discovery Shortcut": [[15, "auto-discovery-shortcut"]], "Bare Key Form": [[15, "bare-key-form"]], "Binary Object": [[9, "binary-object"]], "Built-in Default Policy": [[13, "built-in-default-policy"]], "Built-in Help": [[7, "built-in-help"]], "CLI Reference": [[7, null]], "Command Tree": [[7, "command-tree"]], "Common Risks and Controls": [[2, "common-risks-and-controls"]], "Common Use Cases": [[2, "common-use-cases"]], "Community Sandboxes": [[11, null]], "Components": [[0, "components"]], "Configure Inference Routing": [[5, null]], "Connect to a Sandbox": [[12, "connect-to-a-sandbox"]], "Contribute a Community Sandbox": [[11, "contribute-a-community-sandbox"]], "Create Your First OpenShell Sandbox": [[1, "create-your-first-openshell-sandbox"]], "Create a Provider": [[15, "create-a-provider"]], "Create a Sandbox": [[12, "create-a-sandbox"]], "Create and Manage Sandboxes": [[12, null]], "Create from a Community Sandbox or Custom Image": [[12, "create-from-a-community-sandbox-or-custom-image"]], "Current Catalog": [[11, "current-catalog"]], "Customize Sandbox Policies": [[14, null]], "Debug Denied Requests": [[14, "debug-denied-requests"]], "Default Policy Blocks": [[8, "default-policy-blocks"]], "Default Policy Reference": [[8, null]], "Delete Sandboxes": [[12, "delete-sandboxes"]], "Deployment Modes": [[0, "deployment-modes"]], "Endpoint Object": [[9, "endpoint-object"]], "Environment Variables": [[7, "environment-variables"]], "Examples": [[14, "examples"]], "Explore": [[4, "explore"]], "Filesystem Policy": [[9, "filesystem-policy"]], "From Local Credentials": [[15, "from-local-credentials"]], "Full Example": [[9, "full-example"]], "Gateway Commands": [[7, "gateway-commands"]], "Get Started": [[4, "get-started"]], "How OpenShell Works": [[0, null]], "How a Request Flows": [[0, "how-a-request-flows"]], "How inference.local Works": [[6, "how-inference-local-works"]], "Inference Commands": [[7, "inference-commands"]], "Install the OpenShell CLI": [[1, "install-the-openshell-cli"]], "Interactive SSH": [[12, "interactive-ssh"]], "Iterate on a Running Sandbox": [[14, "iterate-on-a-running-sandbox"]], "Landlock": [[9, "landlock"]], "License": [[10, null]], "List and Inspect Sandboxes": [[12, "list-and-inspect-sandboxes"]], "Manage Providers": [[15, "manage-providers"]], "Monitor your Sandbox": [[12, "monitor-your-sandbox"]], "NVIDIA OpenShell": [[4, null]], "Network Access Rules": [[13, "network-access-rules"]], "Network Policies": [[9, "network-policies"]], "Network Policy Entry": [[9, "network-policy-entry"]], "Next Steps": [[0, "next-steps"], [1, "next-steps"], [2, "next-steps"], [5, "next-steps"], [6, "next-steps"], [11, "next-steps"], [12, "next-steps"], [13, "next-steps"], [14, "next-steps"], [15, "next-steps"], [16, "next-steps"]], "Other Sources": [[11, "other-sources"]], "Overview of NVIDIA OpenShell": [[2, null]], "Policy Commands": [[7, "policy-commands"]], "Policy Schema Reference": [[9, null]], "Policy Structure": [[13, "policy-structure"]], "Port Forwarding Commands": [[7, "port-forwarding-commands"]], "Prerequisites": [[1, "prerequisites"], [16, "prerequisites"]], "Process": [[9, "process"]], "Protection Layers at a Glance": [[2, "protection-layers-at-a-glance"]], "Provider Commands": [[7, "provider-commands"]], "Provider Create Flags": [[7, "provider-create-flags"]], "Providers": [[15, null]], "Quick Start: Apply a Custom Policy": [[14, "quick-start-apply-a-custom-policy"]], "Quickstart": [[1, null]], "Release Notes": [[3, null]], "Rule Object": [[9, "rule-object"]], "Sandbox Commands": [[7, "sandbox-commands"]], "Sandbox Create Flags": [[7, "sandbox-create-flags"]], "Sandbox Lifecycle": [[13, "sandbox-lifecycle"]], "Set Up a Sandbox with GitHub Repo Access": [[16, null]], "Shell Completions": [[7, "shell-completions"]], "Status, Logs, and Terminal": [[7, "status-logs-and-terminal"]], "Step 1: Create a GitHub Provider": [[16, "step-1-create-a-github-provider"]], "Step 1: Create a Provider": [[5, "step-1-create-a-provider"]], "Step 2: Set Inference Routing": [[5, "step-2-set-inference-routing"]], "Step 2: Write the Policy": [[16, "step-2-write-the-policy"]], "Step 3: Create the Sandbox": [[16, "step-3-create-the-sandbox"]], "Step 3: Verify the Active Config": [[5, "step-3-verify-the-active-config"]], "Step 4: Update Part of the Config": [[5, "step-4-update-part-of-the-config"]], "Step 4: Verify Access": [[16, "step-4-verify-access"]], "Step 5: Iterate on the Policy": [[16, "step-5-iterate-on-the-policy"]], "Supported API Patterns": [[6, "supported-api-patterns"]], "Supported Provider Types": [[15, "supported-provider-types"]], "Top-Level Structure": [[9, "top-level-structure"]], "Transfer Files": [[12, "transfer-files"]], "Tutorials": [[17, null]], "Use It from a Sandbox": [[5, "use-it-from-a-sandbox"]], "Use a Community Sandbox": [[11, "use-a-community-sandbox"]], "Verify the Endpoint from a Sandbox": [[5, "verify-the-endpoint-from-a-sandbox"]], "Version": [[9, "version"]], "View Logs": [[12, "view-logs"]], "What Are Community Sandboxes": [[11, "what-are-community-sandboxes"]], "Why OpenShell Exists": [[2, "why-openshell-exists"]], "With Explicit Credentials": [[15, "with-explicit-credentials"]], "nemoclaw inference get": [[7, "nemoclaw-inference-get"]], "nemoclaw inference set": [[7, "nemoclaw-inference-set"]], "nemoclaw inference update": [[7, "nemoclaw-inference-update"]]}, "docnames": ["about/architecture", "about/get-started", "about/overview", "about/release-notes", "index", "inference/configure", "inference/index", "reference/cli", "reference/default-policy", "reference/policy-schema", "resources/eula", "sandboxes/community-sandboxes", "sandboxes/create-and-manage", "sandboxes/index", "sandboxes/policies", "sandboxes/providers", "tutorials/github-sandbox", "tutorials/index"], "envversion": {"sphinx": 62, "sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx.ext.viewcode": 1}, "filenames": ["about/architecture.md", "about/get-started.md", "about/overview.md", "about/release-notes.md", "index.md", "inference/configure.md", "inference/index.md", "reference/cli.md", "reference/default-policy.md", "reference/policy-schema.md", "resources/eula.md", "sandboxes/community-sandboxes.md", "sandboxes/create-and-manage.md", "sandboxes/index.md", "sandboxes/policies.md", "sandboxes/providers.md", "tutorials/github-sandbox.md", "tutorials/index.md"], "indexentries": {}, "objects": {}, "objnames": {}, "objtypes": {}, "terms": {"": [6, 7, 8, 9, 11, 13, 15, 16], "0": [9, 14], "1": [9, 13, 14], "10": 5, "12": 1, "124": 14, "15": 5, "168": 5, "192": 5, "2": 14, "256": 9, "3": 1, "30b": 5, "4": 14, "4096": 9, "443": [8, 9, 13, 14, 16], "5m": 12, "61": 12, "A": [5, 6, 8, 9, 12, 13, 16], "And": 16, "At": 11, "By": 16, "For": [0, 2, 3, 9, 12, 13, 14, 16], "If": [1, 6, 8, 11, 12, 13, 14, 15], "It": [2, 3, 4, 6, 8, 13], "No": [6, 9, 13], "One": [6, 9], "Or": 5, "That": 2, "The": [0, 1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "Then": [14, 16], "To": [5, 11, 14, 16], "With": 2, "a3b": 5, "abc123": 15, "abi": [8, 9, 13], "about": [4, 5, 7, 12, 14], "abov": [14, 15], "absolut": 9, "accept": [7, 11], "access": [1, 2, 4, 5, 6, 7, 8, 12, 14, 15, 17], "across": [0, 2, 16], "act": 0, "action": [8, 12, 14, 16], "activ": [1, 4, 7, 9, 12, 13, 15], "ad": [14, 15], "add": [7, 8, 9, 11, 12, 14, 16], "addit": [15, 16], "address": 9, "adjust": 14, "after": [1, 7, 12, 14, 16], "ag": 12, "again": 12, "against": [0, 11, 12, 13, 14], "agent": [0, 1, 2, 3, 4, 7, 9, 11, 12, 13, 15, 16], "ai": [2, 3, 4, 8, 13, 15], "aliv": 7, "all": [0, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "allow": [0, 2, 6, 8, 9, 13, 14, 16], "allowed_rout": [13, 14], "allowlist": 14, "alon": 9, "along": 16, "alpha": [14, 16], "alreadi": 15, "also": [0, 11, 12], "altern": 14, "an": [0, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "ani": [5, 6, 7, 9, 11, 15, 16], "anoth": [12, 16, 17], "anthrop": [5, 6, 8, 15, 16], "anthropic_api_kei": [1, 5, 15, 16], "anyth": [5, 11], "api": [0, 1, 2, 4, 5, 8, 9, 11, 12, 13, 14, 15, 16], "api_kei": [5, 15], "app": [8, 16], "append": 7, "appli": [2, 6, 7, 8, 11, 13], "applic": [0, 5], "approv": 2, "ar": [2, 5, 6, 7, 8, 9, 12, 13, 15, 16], "architectur": [0, 2, 4], "argument": 7, "artifactori": [1, 4], "ask": 16, "assign": 7, "assist": 5, "associ": 9, "attach": [7, 12], "attempt": 2, "audit": [2, 9], "auth": 0, "authent": 5, "auto": 7, "automat": [0, 1, 9], "autonom": [2, 4], "avail": [7, 11], "avoid": 14, "awar": 0, "back": [7, 9, 11], "backend": [0, 2, 4, 5, 6, 7], "background": [7, 12, 16], "bare": 7, "base": [0, 11], "base_url": 5, "bash": [7, 8, 16], "befor": [0, 1, 5, 7, 9, 12, 13, 14, 16], "begin": [1, 16], "behav": 16, "behavior": [2, 9], "behind": 6, "being": 13, "belong": 5, "below": [2, 7, 9], "best_effort": [8, 9, 13, 16], "between": 12, "bin": [1, 8, 9, 13, 14, 16], "binari": [0, 8, 13, 14, 16], "blank": 16, "block": [0, 2, 9, 12, 13, 14, 16], "bool": 9, "both": [0, 7, 8, 13, 16], "boundari": 0, "box": [8, 13], "bravo": [14, 16], "breakdown": [13, 14], "bring": 2, "broad": 9, "broker": 0, "brows": [12, 13, 15, 16], "build": [7, 8, 11, 12], "built": [1, 2, 11, 12, 15], "bundl": [1, 11, 12], "call": [0, 2, 4, 5, 6, 7, 8, 13, 14, 15, 16], "can": [0, 1, 2, 5, 8, 9, 11, 12, 13, 14, 15, 16], "cannot": [15, 16], "capabl": [2, 4], "case": 0, "catalog": [1, 5, 8, 12, 13, 15], "categori": 9, "caus": 12, "chang": [0, 5, 6, 9, 14, 16], "charact": 9, "chat": [5, 6], "check": [0, 12, 13, 14], "choos": [1, 5], "ci_job_token": 15, "class": 15, "claud": [1, 2, 4, 7, 8, 9, 12, 14, 15, 16], "claude_api_kei": 15, "claude_cod": 16, "cli": [0, 2, 4, 5, 11, 12, 14, 15, 16], "client": 5, "clone": [0, 8, 16], "cloud": 2, "cluster": [0, 7, 12, 15], "code": [0, 1, 2, 5, 6, 7, 8, 11, 12, 14, 15, 16], "codex": [7, 8, 15], "com": [1, 4, 6, 8, 9, 11, 12, 13, 14, 16], "combin": [2, 9, 12, 14], "come": 6, "command": [0, 1, 4, 5, 11, 12, 14, 15], "comment": 16, "commit": 16, "common": [8, 13], "commun": [1, 2, 4, 7, 13, 15], "compat": [5, 6, 9, 13, 16], "complet": [5, 6, 8, 9, 12, 13, 15, 16, 17], "complianc": 2, "compon": [2, 9], "comput": 0, "concept": 4, "config": 7, "configur": [0, 1, 4, 6, 7, 8, 9, 11, 13], "confin": 2, "confirm": [5, 14, 16], "connect": [0, 2, 5, 7, 8, 9, 13], "consid": 11, "consist": 5, "constrain": 2, "constraint": [0, 9], "contain": [0, 1, 7, 8, 9, 11, 12, 16], "container": 2, "content": 5, "context": [0, 2], "continu": 1, "contribut": 12, "control": [0, 5, 6, 9, 11, 12, 13, 14, 15, 16], "coordin": 0, "cost": 0, "cover": [3, 5, 13], "coverag": 8, "creat": [0, 2, 4, 8, 11, 13, 14, 17], "creation": [2, 7, 9, 12, 13, 14, 16], "credenti": [0, 1, 2, 3, 4, 5, 6, 7, 11, 12, 13, 14, 16], "curl": [5, 8, 13, 16], "current": [5, 7, 9, 14, 15, 16], "custom": [1, 2, 4, 8, 11, 13, 15, 16], "d": [5, 7], "danger": [2, 13], "dashboard": [7, 8, 12, 14], "data": [2, 4, 7, 11, 13], "decis": [0, 7, 12], "declar": [2, 4, 8, 9], "decrypt": [0, 9, 14], "default": [2, 7, 9, 11, 14, 16], "defens": [0, 2], "defin": [6, 8, 9, 11, 13, 15], "definit": [0, 1, 11, 14], "delet": [7, 13, 15], "deni": [0, 2, 6, 8, 12, 13, 16], "denial": 14, "depend": [6, 16], "deploi": [0, 7, 8], "deploy": 7, "depth": [0, 2], "describ": [11, 14], "descript": [5, 7, 9, 11, 13], "design": [2, 11], "desktop": 1, "destin": [0, 2, 8, 9, 13, 14], "destroi": [7, 9], "detail": [2, 3, 4, 5, 6, 7, 12, 13], "detect": 15, "dev": [8, 9, 11, 12, 16], "develop": [2, 8], "diagnos": 12, "differ": [9, 16], "dir": [11, 12], "directli": [0, 5, 6, 11, 15], "directori": [7, 9, 11, 12], "disabl": 8, "disallow": 9, "discov": [7, 15], "discoveri": 6, "disk": [9, 11, 13], "displai": 9, "distinct": 16, "do": [6, 15, 16], "docker": [0, 1, 8, 12, 16], "dockerfil": [7, 11, 12], "document": [7, 9], "doe": [5, 15], "domain": 2, "don": 12, "down": [0, 13], "download": [7, 8, 12, 16], "dummi": 5, "dure": 13, "dynam": [9, 13, 16], "e": [13, 16], "each": [0, 1, 3, 7, 8, 9, 11, 13, 14, 15, 16], "edit": [14, 16], "effect": 9, "egress": 0, "either": 9, "elev": 13, "els": 11, "empti": 5, "enabl": [0, 8, 9, 14], "encrypt": 9, "end": [4, 5, 11, 12, 14, 16], "endpoint": [0, 2, 6, 8, 13, 14, 16], "enforc": [0, 1, 2, 3, 9, 13, 14, 16], "engin": [0, 13], "enterpris": 2, "entiti": 15, "entri": [7, 8, 12, 13, 14, 16], "entrypoint": 11, "env": 7, "environ": [1, 2, 4, 5, 11, 12, 13, 14, 15, 16], "error": [8, 12, 13, 16], "escal": 2, "escap": 9, "especi": 12, "etc": [0, 8, 9, 13, 16], "evalu": 6, "event": 12, "everi": [0, 5, 6, 7, 9, 13, 14, 15], "everyth": [7, 16], "ex": 8, "exactli": [4, 16], "exampl": [7, 11, 12, 13, 16], "exce": 9, "exclus": 9, "execut": [2, 3, 4, 7, 8, 9, 13], "exercis": 16, "exfiltr": [2, 4, 13], "exist": [5, 7, 11, 12, 15, 16], "exit": [7, 12, 14, 16], "explain": 12, "explicit": 2, "explicitli": [7, 9, 14], "export": [14, 16], "expos": 6, "exposur": 13, "express": 16, "extend": 16, "extens": 8, "extern": [0, 2, 5, 6, 15], "f": 7, "fail": [9, 14, 16], "failur": 2, "fall": [7, 9], "fastest": 15, "featur": [8, 16], "fetch": [8, 16], "field": [5, 7, 9, 13, 14, 15], "file": [2, 4, 7, 8, 11, 13, 14, 16], "filesystem": [0, 2, 8, 13], "filesystem_polici": [9, 13, 16], "filter": [7, 12, 13], "find": 15, "fine": 9, "finer": 16, "finish": 17, "first": [0, 2, 3, 4, 13, 14, 15, 16], "fish": 7, "fix": 14, "flag": [1, 8, 11, 12, 14, 15, 16], "flow": 5, "follow": [1, 7, 8, 11, 12, 14, 15], "forc": 7, "fork": 11, "format": 7, "forward": [0, 5, 6, 9, 12], "foundat": 11, "four": [0, 2], "from": [0, 1, 4, 6, 7, 11, 13, 14, 16, 17], "full": [1, 7, 8, 12, 13, 14, 16], "fulli": 12, "g": [13, 16], "gallerycdn": [8, 16], "gatewai": [0, 5, 6, 12], "gener": [5, 6, 7, 11, 15], "get": [1, 5, 6, 8, 9, 12, 14, 15, 16], "gh": [8, 9, 14, 15, 16], "gh_token": [15, 16], "gid": 9, "git": [0, 8, 9, 16], "github": [1, 3, 4, 7, 8, 9, 12, 14, 15, 17], "github_api": 16, "github_git": 16, "github_repo": 14, "github_rest_api": 9, "github_token": [15, 16], "githubusercont": [8, 16], "gitlab": [7, 15], "gitlab_token": 15, "give": 2, "glab": 15, "glab_token": 15, "glob": 9, "go": [2, 5], "goe": 13, "govern": 4, "grain": 9, "grant": [8, 16], "granular": 14, "graphql": [14, 16], "group": [8, 9, 13], "grow": 11, "guid": [1, 4, 17], "guidelin": 11, "h": 5, "ha": 13, "handl": [6, 9], "happen": 12, "hard_requir": 9, "hash": 14, "have": [1, 11, 12, 16], "head": [9, 14, 16], "header": 14, "health": 7, "hello": 5, "help": 5, "here": [1, 7], "highest": [8, 9, 13], "highlight": 3, "hint": [7, 13], "hold": 5, "host": [0, 2, 4, 5, 6, 7, 8, 9, 12, 13, 14, 16], "hostnam": 9, "hot": [2, 6, 9, 13, 14, 16], "how": [1, 2, 5, 9, 11, 12, 13, 16], "http": [0, 1, 4, 5, 6, 7, 8, 9, 13, 14, 16], "human": 7, "i": [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "id": [5, 7], "ident": [0, 2, 9], "identifi": [0, 7, 8, 9], "ignor": 5, "imag": [1, 2, 4, 7, 11], "import": 5, "inaccess": 9, "includ": [0, 7, 8, 13], "include_workdir": [9, 16], "index": [1, 4], "individu": [9, 12], "infer": [0, 2, 4, 8, 12, 13, 14, 16], "info": [7, 8, 9, 16], "inform": [7, 12], "infrastructur": [0, 4], "initi": 14, "inject": [0, 6, 7, 12, 13, 15, 16], "input": 5, "insid": [0, 1, 5, 6, 7, 8, 9, 16], "inspect": [7, 9, 13, 14, 15], "inspect_for_infer": 12, "instal": [0, 2, 4, 8, 14, 16], "instead": 5, "instruct": 5, "integ": 9, "integr": [8, 15, 16], "intend": 9, "interact": [7, 16], "intercept": [0, 5, 12], "intern": 2, "introduc": 3, "invalid_argu": 9, "invok": 11, "io": [8, 16], "ip": 9, "isn": 12, "isol": [0, 2, 3, 7, 13], "issu": [8, 14, 16], "iter": 12, "its": [4, 7, 8, 9], "j": 7, "json": 5, "k": 7, "k3": 0, "keep": [0, 2, 4, 7, 12, 14, 16], "kei": [2, 6, 7, 9, 11, 12, 13, 16], "kernel": [0, 2, 3, 8, 9, 13], "known": 15, "kubectl": 7, "kubernet": 0, "l4": 8, "label": 12, "landlock": [2, 8, 13, 16], "last": 7, "later": [1, 12], "latest": [11, 12], "launch": [1, 7, 11, 15], "layer": [0, 13], "learn": [0, 1, 2, 4], "let": [15, 16], "level": [2, 3, 7, 12, 13, 14, 16], "lib": [8, 9, 13, 16], "librari": 16, "lifecycl": [0, 1, 12], "like": [6, 9, 12], "line": 16, "list": [7, 8, 9, 13, 14, 15], "live": [7, 12, 14], "llm": [0, 8], "load": [9, 14], "local": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 14, 16], "locat": 0, "lock": [2, 9, 13, 16], "log": [0, 8, 9, 13, 14, 16], "logic": 9, "longer": 12, "look": [12, 14, 15, 16], "lookup": 8, "lsm": [9, 13], "machin": [1, 12], "mai": [9, 13], "make": [1, 2, 16], "manag": [0, 1, 3, 4, 5, 6, 7, 11, 13, 16], "mandatori": 9, "manipul": 11, "map": 9, "marketplac": [8, 16], "match": [0, 1, 6, 8, 9, 13, 16], "materi": 2, "md": 11, "messag": [5, 6], "metadata": [7, 8, 14], "method": [0, 6, 9, 13, 14, 16], "microsoft": [8, 15, 16], "might": [12, 16], "minimum": 11, "miss": 14, "mitig": 2, "mode": [2, 7, 9], "model": [0, 2, 5, 6, 7, 15], "modifi": [9, 14, 16], "monitor": [7, 14], "more": [3, 4, 7, 15, 16], "most": 2, "move": 13, "msecnd": [8, 16], "multipl": [7, 13, 16], "must": [8, 9, 11, 12, 13], "mutat": 8, "mutual": 9, "my": [5, 11, 12, 13, 14, 15, 16], "my_api": 13, "name": [5, 7, 9, 11, 12, 13, 14, 15, 16], "namespac": 13, "nano": 5, "navig": 7, "need": [4, 5, 6, 11, 12, 13, 14, 15, 16], "neither": 9, "nemoclaw": [0, 1, 3, 4, 5, 9, 11, 12, 13, 15, 16], "nemoclaw_clust": 7, "nemoclaw_sandbox_polici": 7, "nemotron": 5, "net": [8, 16], "network": [0, 2, 4, 5, 6, 8, 12, 14, 16], "network_polici": [5, 6, 9, 13, 14, 16], "new": [7, 14], "node": [8, 9, 16], "non": 8, "none": [8, 15], "nor": 9, "normal": 9, "note": 8, "noth": 4, "now": 1, "npm": 9, "npm_registri": 9, "npmj": 9, "null": [8, 9, 16], "number": 9, "nv": [1, 4], "nvidia": [1, 3, 5, 6, 7, 8, 13, 15, 16], "nvidia_api_kei": [5, 15], "nvidia_infer": 16, "o": [9, 12], "object": [8, 16], "often": 16, "omit": [7, 9], "onc": [5, 16], "one": [0, 5, 6, 7, 11, 12, 15, 16, 17], "ones": 12, "onli": [0, 2, 5, 6, 7, 8, 9, 13, 14, 16, 17], "open": [0, 2, 7, 11, 12, 13], "openai": [5, 6, 8, 15], "openai_api_kei": [5, 15], "openai_base_url": 5, "openclaw": [1, 2, 4, 11, 12], "opencod": [2, 7, 8, 15, 16], "opencode_api_kei": 15, "openrouter_api_kei": 15, "openshel": [3, 5, 6, 7, 8, 9, 11, 13, 14, 15, 16], "openshell_sandbox_polici": 14, "oper": [7, 16], "option": [1, 7, 9, 11, 13, 14, 16], "org": [8, 9, 14, 16], "org_nam": 14, "organ": 16, "origin": [0, 6], "other": [2, 6, 8, 16], "otherwis": 13, "out": [8, 13], "outbound": [0, 2, 6, 8, 12, 13], "outlin": 14, "outlook": [7, 15], "output": [7, 9, 12], "outsid": [2, 16], "over": [2, 8], "overli": 9, "overrid": 7, "overview": 4, "own": [1, 2, 11, 12], "pack": [8, 9, 16], "packag": [0, 1, 2, 8, 11, 12, 16], "page": [1, 3, 5, 12, 14], "pair": [8, 13], "partial": 8, "particular": 11, "pass": [0, 7, 11, 14, 15], "passthrough": [8, 9, 14], "pat": 16, "patch": [9, 14], "path": [0, 2, 6, 7, 8, 9, 11, 13, 14, 16], "pattern": [5, 9], "payload": [13, 14], "per": [0, 9, 14], "perman": 7, "permiss": [4, 9], "permit": 9, "person": 16, "phase": [12, 13], "pick": [1, 6], "pid": 8, "pip": [1, 4, 8, 14, 16], "pipe": 7, "plan": 14, "plane": 0, "platform": [0, 8, 16], "pod": 0, "point": [5, 11, 12], "polici": [0, 1, 2, 3, 4, 11, 12, 15, 17], "port": [0, 8, 9, 12, 13, 14, 16], "post": [6, 8, 9, 14, 16], "pr": [8, 16], "pre": [1, 4, 8, 11, 12, 13, 15], "preconfigur": 11, "preserv": [2, 7], "press": 7, "prevent": [2, 4, 13], "print": 7, "privaci": [0, 2, 5, 6, 13], "privat": [2, 4, 13], "privileg": [2, 13], "proc": [8, 9, 16], "process": [0, 2, 8, 11, 12, 13, 16], "prod": 5, "prompt": [1, 2], "properti": 6, "protect": [0, 4, 13], "protocol": [9, 13, 14, 16], "provid": [1, 2, 4, 6, 8, 9, 11, 12, 13, 14, 17], "provis": [0, 13], "proxi": [0, 8, 9, 12, 13, 14, 16], "prss": [8, 16], "publish": 11, "pull": [1, 8, 11, 12, 14, 16], "purg": [12, 13], "purpos": [11, 12], "push": [8, 14, 16], "put": 9, "pypi": [1, 4, 8, 14, 16], "python": [1, 8, 16], "python3": [8, 16], "pythonhost": [8, 14, 16], "q": 7, "queri": [0, 13], "quickstart": [0, 2, 4, 16], "quit": 7, "rather": 6, "raw": [8, 16], "reach": [5, 8, 9, 13, 14], "reachabl": [5, 9], "read": [2, 5, 7, 8, 9, 13, 14, 15, 16, 17], "read_onli": [9, 13, 16], "read_writ": [9, 13, 16], "readabl": 7, "readi": [6, 11, 13], "readm": [11, 16], "real": 12, "reason": [5, 14], "receiv": [8, 15, 16], "recogn": 15, "reconnect": [12, 16], "record": [5, 6, 7], "recreat": [6, 9, 15], "ref": [8, 9, 16], "refer": [2, 3, 4, 5, 11, 12, 13, 14, 15, 16], "refresh": 6, "refus": 12, "regist": 7, "registri": [9, 11, 12], "reject": 9, "releas": [8, 12, 13], "relev": 9, "reload": [2, 9, 13, 14, 16], "remain": 16, "remot": [0, 7, 8, 12, 16], "remov": [7, 12], "repeat": [5, 7, 14], "replac": [7, 14, 16], "repo": [1, 4, 12, 14, 15, 17], "report": [8, 16], "repositori": [8, 11, 16], "request": [5, 6, 7, 8, 9, 11, 13], "requir": [5, 7, 8, 9, 15], "rerout": [2, 13], "resolv": [8, 11, 12], "resourc": [12, 13], "respons": [5, 6], "rest": [0, 8, 9, 13, 14, 16], "restart": 9, "restrict": [2, 9, 13], "retriev": 12, "return": [0, 12], "reus": 14, "reusabl": 2, "review": [2, 11], "revis": 14, "rewrit": 5, "role": [0, 5], "root": 9, "rout": [0, 2, 4, 8, 13], "router": [0, 5, 6], "rule": [0, 1, 5, 6, 8, 11, 14, 16], "run": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 15, 16], "run_as_group": [9, 13, 16], "run_as_us": [9, 13, 16], "runtim": [0, 2, 4, 7, 12, 13, 15, 16], "safe": [4, 13], "same": [0, 2, 5, 6, 8, 13, 16], "sandbox": [0, 2, 3, 4, 6, 8, 9, 17], "save": 5, "scenario": 16, "schema": [4, 13, 14, 15, 16], "scope": [1, 5, 9, 16, 17], "script": [7, 11], "sdg": 11, "seccomp": [2, 13], "second": 16, "secret": [2, 7], "section": [8, 13, 14], "secur": [0, 2, 5, 6], "see": [1, 5, 6, 7, 13, 14, 15, 16], "select": 7, "self": [2, 4, 5], "send": 2, "sensit": [0, 2], "sentri": [8, 16], "separ": 15, "serv": 5, "server": [5, 8, 9, 16], "servic": [0, 15], "session": [7, 8, 12], "set": [1, 6, 8, 9, 11, 12, 13, 14, 15, 17], "setuid": [2, 13], "sever": 12, "share": [1, 4, 16], "shell": [15, 16], "ship": 13, "should": [5, 6, 16], "show": [7, 8, 12, 14, 16], "simpl": [1, 4, 14], "simul": 11, "sinc": 12, "singl": [1, 7, 11, 12], "sk": 15, "skill": [1, 11], "smart": [8, 16], "so": [2, 8, 11, 15, 16], "socket": 8, "someth": 13, "sourc": [1, 2, 7, 12, 14, 16], "special": 6, "specif": 12, "specifi": [7, 12, 15], "split": 13, "spot": 12, "src": 12, "ssh": [0, 2, 7], "stai": [5, 6], "standalon": 8, "standard": 16, "start": [0, 7, 9, 12, 13, 16, 17], "startup": [7, 11], "state": [0, 7], "static": [9, 13, 16], "statsig": [8, 16], "statu": [12, 14], "step": 17, "stop": [7, 12], "storag": 9, "store": [15, 16], "stream": [7, 12, 13, 14], "string": 9, "strip": [0, 6, 14], "structur": 14, "subcommand": 7, "subdomain": 9, "submiss": 11, "subsequ": 7, "success": 5, "successfulli": 16, "sudo": [2, 13], "summar": 2, "supervis": 0, "suppli": [5, 6, 11, 12, 13, 15], "support": [5, 8, 9, 11, 13, 16], "sure": [1, 16], "switch": 5, "sync": 13, "syntax": 9, "synthet": 11, "syscal": 2, "system": [4, 9, 11, 13], "t": 12, "tab": [1, 7], "tabl": [2, 8], "tail": [7, 12, 14, 16], "tailor": 1, "take": 9, "target": 7, "tcp": [8, 9, 13, 14], "team": 2, "telemetri": 8, "term": [7, 12, 14], "termin": [0, 8, 9, 12, 13, 14, 16], "test": 16, "than": 6, "theft": 2, "thei": [2, 4, 12], "them": [2, 9, 13, 15, 16], "thi": [1, 2, 3, 5, 7, 9, 12, 13, 14, 15, 16], "thing": [13, 16], "those": 13, "threat": 2, "three": [0, 13], "through": [0, 5, 6, 8, 9, 12, 13, 17], "throughout": 16, "time": [7, 9, 12, 14], "timeout": 14, "titl": 16, "tl": [0, 8, 9, 13, 14, 16], "tmp": [8, 9, 13, 16], "togeth": 0, "token": [11, 12, 13, 15, 16], "tool": [11, 15], "torn": 13, "total": 9, "tradeoff": 2, "traffic": [0, 2, 4, 5, 6, 8, 9], "trail": [7, 12, 15], "transpar": 0, "travers": 9, "treat": [2, 6, 16], "tree": 9, "triag": 14, "true": [9, 16], "trust": 16, "try": [12, 16], "tunnel": [0, 7], "tutori": [1, 4, 12, 16], "two": [1, 4, 5, 6, 16], "type": [1, 5, 7, 9, 16], "typic": [9, 15], "uid": 9, "unapprov": 2, "unauthor": [2, 4, 13], "unavail": 9, "uncontrol": 4, "under": [2, 9, 11, 13, 16], "understand": 2, "unexpectedli": 12, "unix": 9, "unprivileg": [2, 13], "unrestrict": 2, "up": [1, 2, 6, 7, 11, 12, 13, 14, 15, 17], "updat": [6, 8, 9, 14, 15, 16], "upgrad": [1, 4], "upload": [2, 7, 8, 9, 12, 16], "upstream": 5, "urandom": [8, 9, 16], "url": [1, 4, 9], "urm": [1, 4], "us": [0, 7, 8, 9, 12, 13, 14, 15, 16], "usag": [2, 7], "user": [0, 5, 7, 8, 9, 13, 15], "usernam": [14, 16], "usr": [8, 9, 13, 14, 16], "uv": [1, 4, 8, 14, 16], "v": [7, 8, 12, 13, 16], "v1": [5, 6], "valid": [9, 14], "valu": [5, 7, 8, 9, 15], "var": [8, 16], "variabl": [4, 14, 15, 16], "venv": [1, 8, 16], "verifi": 14, "version": [2, 5, 7, 13, 14, 16], "via": 8, "view": [7, 13], "violat": 9, "virtual": 1, "visualstudio": [8, 16], "vo": [8, 16], "vsasset": [8, 16], "vscode": [8, 9, 16], "wa": [5, 7], "wai": [6, 15, 16], "wait": [14, 16], "walk": [12, 17], "walkthrough": 14, "want": [5, 11, 12, 13, 15, 16], "warn": 12, "well": 16, "went": 13, "wget": [8, 16], "what": [2, 9, 12, 13, 14, 15, 16], "when": [2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15], "whenev": 14, "where": [2, 9, 16], "whether": 9, "which": [0, 7, 9, 14], "while": [2, 16], "whose": 11, "wildcard": 9, "window": 12, "within": 12, "without": [2, 5, 6, 7, 8, 9, 12, 13, 14, 15, 16], "work": [1, 5, 8, 9, 12, 13, 16], "workdir": 8, "workflow": [11, 12, 13, 14, 16, 17], "workstat": 0, "would": 9, "write": [1, 2, 8, 9, 11, 12, 13, 14, 15, 17], "wrong": 13, "yaml": [2, 7, 8, 9, 11, 12, 14, 15, 16], "ye": [1, 8, 9], "you": [1, 5, 7, 8, 11, 12, 13, 14, 15, 16], "your": [0, 2, 4, 5, 7, 11, 13, 14, 15, 16], "yourself": 15, "zero": 1, "zsh": 7, "zshrc": 7}, "titles": ["How OpenShell Works", "Quickstart", "Overview of NVIDIA OpenShell", "Release Notes", "NVIDIA OpenShell", "Configure Inference Routing", "About Inference Routing", "CLI Reference", "Default Policy Reference", "Policy Schema Reference", "License", "Community Sandboxes", "Create and Manage Sandboxes", "About Sandboxes", "Customize Sandbox Policies", "Providers", "Set Up a Sandbox with GitHub Repo Access", "Tutorials"], "titleterms": {"0": 3, "1": [3, 5, 16], "2": [5, 16], "3": [5, 16], "4": [5, 16], "5": 16, "It": 5, "With": 15, "about": [6, 13], "access": [9, 13, 16], "activ": 5, "agent": 8, "api": 6, "appli": 14, "ar": 11, "attach": 15, "auto": 15, "bare": 15, "binari": 9, "block": 8, "built": [7, 13], "case": 2, "catalog": 11, "cli": [1, 7], "command": 7, "common": 2, "commun": [11, 12], "compat": 8, "complet": 7, "compon": 0, "config": 5, "configur": 5, "connect": 12, "contribut": 11, "control": 2, "creat": [1, 5, 7, 12, 15, 16], "credenti": 15, "current": 11, "custom": [12, 14], "debug": 14, "default": [8, 13], "delet": 12, "deni": 14, "deploy": 0, "discoveri": 15, "endpoint": [5, 9], "entri": 9, "environ": 7, "exampl": [9, 14], "exist": 2, "explicit": 15, "explor": 4, "file": 12, "filesystem": 9, "first": 1, "flag": 7, "flow": 0, "form": 15, "forward": 7, "from": [5, 12, 15], "full": 9, "gatewai": 7, "get": [4, 7], "github": 16, "glanc": 2, "help": 7, "how": [0, 6], "imag": 12, "infer": [5, 6, 7], "inspect": 12, "instal": 1, "interact": 12, "iter": [14, 16], "kei": 15, "landlock": 9, "layer": 2, "level": 9, "licens": 10, "lifecycl": 13, "list": 12, "local": [6, 15], "log": [7, 12], "manag": [12, 15], "mode": 0, "monitor": 12, "nemoclaw": 7, "network": [9, 13], "next": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "note": 3, "nvidia": [2, 4], "object": 9, "openshel": [0, 1, 2, 4], "other": 11, "overview": 2, "part": 5, "pattern": 6, "polici": [7, 8, 9, 13, 14, 16], "port": 7, "prerequisit": [1, 16], "process": 9, "protect": 2, "provid": [5, 7, 15, 16], "quick": 14, "quickstart": 1, "refer": [7, 8, 9], "releas": 3, "repo": 16, "request": [0, 14], "risk": 2, "rout": [5, 6], "rule": [9, 13], "run": 14, "sandbox": [1, 5, 7, 11, 12, 13, 14, 15, 16], "schema": 9, "set": [5, 7, 16], "shell": 7, "shortcut": 15, "sourc": 11, "ssh": 12, "start": [4, 14], "statu": 7, "step": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "structur": [9, 13], "support": [6, 15], "termin": 7, "top": 9, "transfer": 12, "tree": 7, "tutori": 17, "type": 15, "up": 16, "updat": [5, 7], "us": [2, 5, 11], "variabl": 7, "verifi": [5, 16], "version": 9, "view": 12, "what": 11, "why": 2, "work": [0, 6], "write": 16, "your": [1, 12]}})
\ No newline at end of file
+Search.setIndex({"alltitles": {"0.1.0": [[3, "id1"]], "About Inference Routing": [[6, null]], "About Sandboxes": [[13, null]], "Access Levels": [[9, "access-levels"]], "Agent Compatibility": [[8, "agent-compatibility"]], "Already have a sandbox running?": [[16, null]], "Attach Providers to Sandboxes": [[15, "attach-providers-to-sandboxes"]], "Auto-Discovery Shortcut": [[15, "auto-discovery-shortcut"]], "Bare Key Form": [[15, "bare-key-form"]], "Binary Object": [[9, "binary-object"]], "Built-in Default Policy": [[13, "built-in-default-policy"]], "Built-in Help": [[7, "built-in-help"]], "CLI Reference": [[7, null]], "Command Tree": [[7, "command-tree"]], "Common Risks and Controls": [[2, "common-risks-and-controls"]], "Common Use Cases": [[2, "common-use-cases"]], "Community Sandboxes": [[11, null]], "Components": [[0, "components"]], "Configure Inference Routing": [[5, null]], "Connect to a Gateway": [[1, "connect-to-a-gateway"]], "Connect to a Sandbox": [[12, "connect-to-a-sandbox"]], "Contribute a Community Sandbox": [[11, "contribute-a-community-sandbox"]], "Create Your First OpenShell Sandbox": [[1, "create-your-first-openshell-sandbox"]], "Create a Provider": [[15, "create-a-provider"]], "Create a Sandbox": [[12, "create-a-sandbox"]], "Create and Manage Sandboxes": [[12, null]], "Create from a Community Sandbox or Custom Image": [[12, "create-from-a-community-sandbox-or-custom-image"]], "Current Catalog": [[11, "current-catalog"]], "Customize Sandbox Policies": [[14, null]], "Debug Denied Requests": [[14, "debug-denied-requests"]], "Default Policy Blocks": [[8, "default-policy-blocks"]], "Default Policy Reference": [[8, null]], "Delete Sandboxes": [[12, "delete-sandboxes"]], "Deployment Modes": [[0, "deployment-modes"]], "Endpoint Object": [[9, "endpoint-object"]], "Environment Variables": [[7, "environment-variables"]], "Examples": [[14, "examples"]], "Explore": [[4, "explore"]], "Filesystem Policy": [[9, "filesystem-policy"]], "From Local Credentials": [[15, "from-local-credentials"]], "Full Example": [[9, "full-example"]], "Gateway Commands": [[7, "gateway-commands"]], "Get Started": [[4, "get-started"]], "How OpenShell Works": [[0, null]], "How a Request Flows": [[0, "how-a-request-flows"]], "How inference.local Works": [[6, "how-inference-local-works"]], "Inference Commands": [[7, "inference-commands"]], "Install the OpenShell CLI": [[1, "install-the-openshell-cli"]], "Interactive SSH": [[12, "interactive-ssh"]], "Iterate on a Running Sandbox": [[14, "iterate-on-a-running-sandbox"]], "Landlock": [[9, "landlock"]], "License": [[10, null]], "List and Inspect Sandboxes": [[12, "list-and-inspect-sandboxes"]], "Manage Providers": [[15, "manage-providers"]], "Monitor your Sandbox": [[12, "monitor-your-sandbox"]], "NVIDIA OpenShell": [[4, null]], "Network Access Rules": [[13, "network-access-rules"]], "Network Policies": [[9, "network-policies"]], "Network Policy Entry": [[9, "network-policy-entry"]], "Next Steps": [[0, "next-steps"], [1, "next-steps"], [2, "next-steps"], [5, "next-steps"], [6, "next-steps"], [11, "next-steps"], [12, "next-steps"], [13, "next-steps"], [14, "next-steps"], [15, "next-steps"], [16, "next-steps"]], "Other Sources": [[11, "other-sources"]], "Overview of NVIDIA OpenShell": [[2, null]], "Policy Commands": [[7, "policy-commands"]], "Policy Schema Reference": [[9, null]], "Policy Structure": [[13, "policy-structure"]], "Port Forwarding Commands": [[7, "port-forwarding-commands"]], "Prerequisites": [[1, "prerequisites"], [16, "prerequisites"]], "Process": [[9, "process"]], "Protection Layers at a Glance": [[2, "protection-layers-at-a-glance"]], "Provider Commands": [[7, "provider-commands"]], "Provider Create Flags": [[7, "provider-create-flags"]], "Providers": [[15, null]], "Quick Start: Apply a Custom Policy": [[14, "quick-start-apply-a-custom-policy"]], "Quickstart": [[1, null]], "Release Notes": [[3, null]], "Rule Object": [[9, "rule-object"]], "Sandbox Commands": [[7, "sandbox-commands"]], "Sandbox Create Flags": [[7, "sandbox-create-flags"]], "Sandbox Lifecycle": [[13, "sandbox-lifecycle"]], "Set Up a Sandbox with GitHub Repo Access": [[16, null]], "Shell Completions": [[7, "shell-completions"]], "Status, Logs, and Terminal": [[7, "status-logs-and-terminal"]], "Step 1: Create a GitHub Provider": [[16, "step-1-create-a-github-provider"]], "Step 1: Create a Provider": [[5, "step-1-create-a-provider"]], "Step 2: Set Inference Routing": [[5, "step-2-set-inference-routing"]], "Step 2: Write the Policy": [[16, "step-2-write-the-policy"]], "Step 3: Create the Sandbox": [[16, "step-3-create-the-sandbox"]], "Step 3: Verify the Active Config": [[5, "step-3-verify-the-active-config"]], "Step 4: Update Part of the Config": [[5, "step-4-update-part-of-the-config"]], "Step 4: Verify Access": [[16, "step-4-verify-access"]], "Step 5: Iterate on the Policy": [[16, "step-5-iterate-on-the-policy"]], "Supported API Patterns": [[6, "supported-api-patterns"]], "Supported Provider Types": [[15, "supported-provider-types"]], "Top-Level Structure": [[9, "top-level-structure"]], "Transfer Files": [[12, "transfer-files"]], "Tutorials": [[17, null]], "Use It from a Sandbox": [[5, "use-it-from-a-sandbox"]], "Use a Community Sandbox": [[11, "use-a-community-sandbox"]], "Verify the Endpoint from a Sandbox": [[5, "verify-the-endpoint-from-a-sandbox"]], "Version": [[9, "version"]], "View Logs": [[12, "view-logs"]], "What Are Community Sandboxes": [[11, "what-are-community-sandboxes"]], "Why OpenShell Exists": [[2, "why-openshell-exists"]], "With Explicit Credentials": [[15, "with-explicit-credentials"]], "nemoclaw inference get": [[7, "nemoclaw-inference-get"]], "nemoclaw inference set": [[7, "nemoclaw-inference-set"]], "nemoclaw inference update": [[7, "nemoclaw-inference-update"]]}, "docnames": ["about/architecture", "about/get-started", "about/overview", "about/release-notes", "index", "inference/configure", "inference/index", "reference/cli", "reference/default-policy", "reference/policy-schema", "resources/eula", "sandboxes/community-sandboxes", "sandboxes/create-and-manage", "sandboxes/index", "sandboxes/policies", "sandboxes/providers", "tutorials/github-sandbox", "tutorials/index"], "envversion": {"sphinx": 62, "sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx.ext.viewcode": 1}, "filenames": ["about/architecture.md", "about/get-started.md", "about/overview.md", "about/release-notes.md", "index.md", "inference/configure.md", "inference/index.md", "reference/cli.md", "reference/default-policy.md", "reference/policy-schema.md", "resources/eula.md", "sandboxes/community-sandboxes.md", "sandboxes/create-and-manage.md", "sandboxes/index.md", "sandboxes/policies.md", "sandboxes/providers.md", "tutorials/github-sandbox.md", "tutorials/index.md"], "indexentries": {}, "objects": {}, "objnames": {}, "objtypes": {}, "terms": {"": [6, 7, 8, 9, 11, 13, 15, 16], "0": [9, 14], "1": [9, 13, 14], "10": 5, "12": 1, "124": 14, "15": 5, "168": 5, "192": 5, "2": 14, "256": 9, "3": 1, "30b": 5, "4": 14, "4096": 9, "443": [8, 9, 13, 14, 16], "5m": 12, "61": 12, "A": [5, 6, 8, 9, 12, 13, 16], "And": 16, "At": 11, "By": 16, "For": [0, 2, 3, 9, 12, 13, 14, 16], "If": [1, 6, 8, 11, 12, 13, 14, 15, 16], "It": [2, 3, 4, 6, 8, 13], "No": [1, 6, 9, 13], "One": [6, 9], "Or": 5, "That": 2, "The": [0, 1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "Then": [14, 16], "To": [5, 11, 14, 16], "With": 2, "a3b": 5, "abc123": 15, "abi": [8, 9, 13], "about": [4, 5, 7, 12, 14], "abov": [14, 15], "absolut": 9, "accept": [7, 11], "access": [1, 2, 4, 5, 6, 7, 8, 12, 14, 15, 17], "across": [0, 2, 16], "act": 0, "action": [8, 12, 14, 16], "activ": [1, 4, 7, 9, 12, 13, 15], "ad": [14, 15], "add": [1, 7, 8, 9, 11, 12, 14, 16], "addit": [1, 15, 16], "address": 9, "adjust": 14, "after": [1, 7, 12, 14, 16], "ag": 12, "again": 12, "against": [0, 11, 12, 13, 14], "agent": [0, 1, 2, 3, 4, 7, 9, 11, 12, 13, 15, 16], "ai": [2, 3, 4, 8, 13, 15], "aliv": 7, "all": [0, 1, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "allow": [0, 2, 6, 8, 9, 13, 14, 16], "allowed_rout": [13, 14], "allowlist": 14, "alon": 9, "along": 16, "alpha": [14, 16], "alreadi": 15, "also": [0, 11, 12], "altern": 14, "an": [0, 1, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "ani": [5, 6, 7, 9, 11, 15, 16], "anoth": [12, 16, 17], "anthrop": [5, 6, 8, 15, 16], "anthropic_api_kei": [1, 5, 15, 16], "anyth": [5, 11], "api": [0, 1, 2, 4, 5, 8, 9, 11, 12, 13, 14, 15, 16], "api_kei": [5, 15], "app": [8, 16], "append": 7, "appli": [2, 6, 7, 8, 11, 13], "applic": [0, 5], "approv": 2, "ar": [2, 5, 6, 7, 8, 9, 12, 13, 15, 16], "architectur": [0, 2, 4], "argument": 7, "artifactori": [1, 4], "ask": 16, "assign": 7, "assist": 5, "associ": 9, "attach": [7, 12], "attempt": 2, "audit": [2, 9], "auth": 0, "authent": 5, "auto": 7, "automat": [0, 1, 9], "autonom": [2, 4], "avail": [7, 11], "avoid": 14, "awar": 0, "back": [7, 9, 11], "backend": [0, 2, 4, 5, 6, 7], "background": [7, 12, 16], "bare": 7, "base": [0, 11], "base_url": 5, "bash": [7, 8, 16], "befor": [0, 1, 5, 7, 9, 12, 13, 14, 16], "begin": [1, 16], "behav": 16, "behavior": [2, 9], "behind": 6, "being": 13, "belong": 5, "below": [2, 7, 9, 16], "best_effort": [8, 9, 13, 16], "between": 12, "bin": [1, 8, 9, 13, 14, 16], "binari": [0, 8, 13, 14, 16], "blank": 16, "block": [0, 2, 9, 12, 13, 14, 16], "bool": 9, "both": [0, 7, 8, 13, 16], "boundari": 0, "box": [8, 13], "bravo": [14, 16], "breakdown": [13, 14], "brev": 1, "bring": 2, "broad": 9, "broker": 0, "brows": [12, 13, 15, 16], "build": [7, 8, 11, 12], "built": [1, 2, 11, 12, 15], "bundl": [1, 11, 12], "call": [0, 2, 4, 5, 6, 7, 8, 13, 14, 15, 16], "can": [0, 1, 2, 5, 8, 9, 11, 12, 13, 14, 15, 16], "cannot": [15, 16], "capabl": [2, 4], "case": 0, "catalog": [1, 5, 8, 12, 13, 15], "categori": 9, "caus": 12, "chang": [0, 5, 6, 9, 14, 16], "charact": 9, "chat": [5, 6], "check": [0, 12, 13, 14], "choos": [1, 5], "ci_job_token": 15, "class": 15, "claud": [1, 2, 4, 7, 8, 9, 12, 14, 15, 16], "claude_api_kei": 15, "claude_cod": 16, "cli": [0, 2, 4, 5, 11, 12, 14, 15, 16], "client": 5, "clone": [0, 8, 16], "cloud": 2, "cluster": [0, 7, 12, 15], "code": [0, 1, 2, 5, 6, 7, 8, 11, 12, 14, 15, 16], "codex": [7, 8, 15], "com": [1, 4, 6, 8, 9, 11, 12, 13, 14, 16], "combin": [2, 9, 12, 14], "come": 6, "command": [0, 1, 4, 5, 11, 12, 14, 15], "comment": 16, "commit": 16, "common": [8, 13], "commun": [1, 2, 4, 7, 13, 15], "compat": [5, 6, 9, 13, 16], "complet": [5, 6, 8, 9, 12, 13, 15, 16, 17], "complianc": 2, "compon": [2, 9], "comput": 0, "concept": 4, "config": 7, "configur": [0, 1, 4, 6, 7, 8, 9, 11, 13], "confin": 2, "confirm": [5, 14, 16], "connect": [0, 2, 5, 7, 8, 9, 13, 16], "consid": 11, "consist": 5, "constrain": 2, "constraint": [0, 9], "contain": [0, 1, 7, 8, 9, 11, 12, 16], "container": 2, "content": 5, "context": [0, 2], "continu": 1, "contribut": 12, "control": [0, 5, 6, 9, 11, 12, 13, 14, 15, 16], "coordin": 0, "cost": 0, "cover": [3, 5, 13], "coverag": 8, "creat": [0, 2, 4, 8, 11, 13, 14, 17], "creation": [2, 7, 9, 12, 13, 14, 16], "credenti": [0, 1, 2, 3, 4, 5, 6, 7, 11, 12, 13, 14, 16], "curl": [5, 8, 13, 16], "current": [5, 7, 9, 14, 15, 16], "custom": [1, 2, 4, 8, 11, 13, 15, 16], "d": [5, 7], "danger": [2, 13], "dashboard": [7, 8, 12, 14], "data": [2, 4, 7, 11, 13], "decis": [0, 7, 12], "declar": [2, 4, 8, 9], "decrypt": [0, 9, 14], "default": [2, 7, 9, 11, 14, 16], "defens": [0, 2], "defin": [6, 8, 9, 11, 13, 15], "definit": [0, 1, 11, 14], "delet": [7, 13, 15, 16], "deni": [0, 2, 6, 8, 12, 13, 16], "denial": 14, "depend": [6, 16], "deploi": [0, 1, 7, 8], "deploy": 7, "depth": [0, 2], "describ": [11, 14], "descript": [5, 7, 9, 11, 13], "design": [2, 11], "desktop": 1, "destin": [0, 2, 8, 9, 13, 14], "destroi": [7, 9], "detail": [2, 3, 4, 5, 6, 7, 12, 13], "detect": 15, "dev": [8, 9, 11, 12, 16], "develop": [2, 8], "diagnos": 12, "differ": [9, 16], "dir": [11, 12], "directli": [0, 5, 6, 11, 15], "directori": [7, 9, 11, 12], "disabl": 8, "disallow": 9, "discov": [7, 15], "discoveri": 6, "disk": [9, 11, 13], "displai": 9, "distinct": 16, "do": [6, 15, 16], "docker": [0, 1, 8, 12, 16], "dockerfil": [7, 11, 12], "document": [7, 9], "doe": [5, 15], "domain": 2, "don": 12, "down": [0, 13], "download": [7, 8, 12, 16], "dummi": 5, "dure": 13, "dynam": [9, 13, 16], "e": [13, 16], "each": [0, 1, 3, 7, 8, 9, 11, 13, 14, 15, 16], "edit": [14, 16], "effect": 9, "egress": 0, "either": 9, "elev": 13, "els": 11, "empti": 5, "enabl": [0, 8, 9, 14], "encrypt": 9, "end": [4, 5, 11, 12, 14, 16], "endpoint": [0, 2, 6, 8, 13, 14, 16], "enforc": [0, 1, 2, 3, 9, 13, 14, 16], "engin": [0, 13], "enterpris": 2, "entiti": 15, "entri": [7, 8, 12, 13, 14, 16], "entrypoint": 11, "env": 7, "environ": [1, 2, 4, 5, 11, 12, 13, 14, 15, 16], "error": [8, 12, 13, 16], "escal": 2, "escap": 9, "especi": 12, "etc": [0, 8, 9, 13, 16], "evalu": 6, "event": 12, "everi": [0, 5, 6, 7, 9, 13, 14, 15], "everyth": [7, 16], "ex": 8, "exactli": [4, 16], "exampl": [7, 11, 12, 13, 16], "exce": 9, "exclus": 9, "execut": [2, 3, 4, 7, 8, 9, 13], "exercis": 16, "exfiltr": [2, 4, 13], "exist": [5, 7, 11, 12, 15, 16], "exit": [7, 12, 14, 16], "explain": 12, "explicit": 2, "explicitli": [7, 9, 14], "export": [14, 16], "expos": 6, "exposur": 13, "express": 16, "extend": 16, "extens": 8, "extern": [0, 2, 5, 6, 15], "f": 7, "fail": [9, 14, 16], "failur": 2, "fall": [7, 9], "fastest": 15, "featur": [8, 16], "fetch": [8, 16], "field": [5, 7, 9, 13, 14, 15], "file": [2, 4, 7, 8, 11, 13, 14, 16], "filesystem": [0, 2, 8, 13], "filesystem_polici": [9, 13, 16], "filter": [7, 12, 13], "find": 15, "fine": 9, "finer": 16, "finish": 17, "first": [0, 2, 3, 4, 13, 14, 15, 16], "fish": 7, "fix": 14, "flag": [1, 8, 11, 12, 14, 15, 16], "flow": 5, "follow": [1, 7, 8, 11, 12, 14, 15, 16], "forc": 7, "fork": 11, "format": 7, "forward": [0, 5, 6, 9, 12], "foundat": 11, "four": [0, 2], "from": [0, 1, 4, 6, 7, 11, 13, 14, 16, 17], "full": [1, 7, 8, 12, 13, 14, 16], "fulli": 12, "g": [13, 16], "gallerycdn": [8, 16], "gatewai": [0, 5, 6, 12], "gener": [5, 6, 7, 11, 15], "get": [1, 5, 6, 8, 9, 12, 14, 15, 16], "gh": [8, 9, 14, 15, 16], "gh_token": [15, 16], "gid": 9, "git": [0, 8, 9, 16], "github": [1, 3, 4, 7, 8, 9, 12, 14, 15, 17], "github_api": 16, "github_git": 16, "github_repo": 14, "github_rest_api": 9, "github_token": [15, 16], "githubusercont": [8, 16], "gitlab": [7, 15], "gitlab_token": 15, "give": 2, "glab": 15, "glab_token": 15, "glob": 9, "go": [2, 5], "goe": 13, "govern": 4, "grain": 9, "grant": [8, 16], "granular": 14, "graphql": [14, 16], "group": [8, 9, 13], "grow": 11, "guid": [1, 4, 17], "guidelin": 11, "h": 5, "ha": 13, "handl": [6, 9], "happen": 12, "hard_requir": 9, "hash": 14, "have": [1, 11, 12], "head": [9, 14, 16], "header": 14, "health": 7, "healthi": 1, "hello": 5, "help": 5, "here": [1, 7], "highest": [8, 9, 13], "highlight": 3, "hint": [7, 13], "hold": 5, "host": [0, 2, 4, 5, 6, 7, 8, 9, 12, 13, 14, 16], "hostnam": 9, "hot": [2, 6, 9, 13, 14, 16], "how": [1, 2, 5, 9, 11, 12, 13, 16], "http": [0, 1, 4, 5, 6, 7, 8, 9, 13, 14, 16], "human": 7, "i": [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "id": [5, 7], "ident": [0, 2, 9], "identifi": [0, 7, 8, 9], "ignor": 5, "imag": [1, 2, 4, 7, 11], "import": 5, "inaccess": 9, "includ": [0, 7, 8, 13], "include_workdir": [9, 16], "index": [1, 4], "individu": [9, 12], "infer": [0, 2, 4, 8, 12, 13, 14, 16], "info": [7, 8, 9, 16], "inform": [7, 12], "infrastructur": [0, 4], "initi": 14, "inject": [0, 6, 7, 12, 13, 15, 16], "input": 5, "insid": [0, 1, 5, 6, 7, 8, 9, 16], "inspect": [7, 9, 13, 14, 15], "inspect_for_infer": 12, "instal": [0, 2, 4, 8, 14, 16], "instanc": 1, "instead": 5, "instruct": 5, "integ": 9, "integr": [8, 15, 16], "intend": 9, "interact": [7, 16], "intercept": [0, 5, 12], "intern": 2, "introduc": 3, "invalid_argu": 9, "invok": 11, "io": [8, 16], "ip": 9, "isn": 12, "isol": [0, 2, 3, 7, 13], "issu": [8, 14, 16], "iter": 12, "its": [4, 7, 8, 9], "j": 7, "json": 5, "k": 7, "k3": 0, "keep": [0, 2, 4, 7, 12, 14, 16], "kei": [2, 6, 7, 9, 11, 12, 13, 16], "kernel": [0, 2, 3, 8, 9, 13], "known": 15, "kubectl": 7, "kubernet": 0, "l4": 8, "label": 12, "landlock": [2, 8, 13, 16], "last": 7, "later": [1, 12], "latest": [11, 12], "launch": [1, 7, 11, 15], "launchabl": 1, "layer": [0, 13], "learn": [0, 1, 2, 4], "let": [15, 16], "level": [2, 3, 7, 12, 13, 14, 16], "lib": [8, 9, 13, 16], "librari": 16, "lifecycl": [0, 1, 12], "like": [6, 9, 12], "line": 16, "list": [7, 8, 9, 13, 14, 15], "live": [7, 12, 14], "llm": [0, 8], "load": [9, 14], "local": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 14, 16], "locat": 0, "lock": [2, 9, 13, 16], "log": [0, 8, 9, 13, 14, 16], "logic": 9, "longer": 12, "look": [12, 14, 15, 16], "lookup": 8, "lsm": [9, 13], "machin": [1, 12], "mai": [9, 13], "make": [1, 2, 16], "manag": [0, 1, 3, 4, 5, 6, 7, 11, 13, 16], "mandatori": 9, "manipul": 11, "map": 9, "marketplac": [8, 16], "match": [0, 1, 6, 8, 9, 13, 16], "materi": 2, "md": 11, "messag": [5, 6], "metadata": [7, 8, 14], "method": [0, 6, 9, 13, 14, 16], "microsoft": [8, 15, 16], "might": [12, 16], "minimum": 11, "miss": 14, "mitig": 2, "mode": [2, 7, 9], "model": [0, 2, 5, 6, 7, 15], "modifi": [9, 14, 16], "monitor": [7, 14], "more": [3, 4, 7, 15, 16], "most": 2, "move": 13, "msecnd": [8, 16], "multipl": [7, 13, 16], "must": [8, 9, 11, 12, 13], "mutat": 8, "mutual": 9, "my": [5, 11, 12, 13, 14, 15, 16], "my_api": 13, "name": [5, 7, 9, 11, 12, 13, 14, 15, 16], "namespac": 13, "nano": 5, "navig": 7, "need": [1, 4, 5, 6, 11, 12, 13, 14, 15, 16], "neither": 9, "nemoclaw": [0, 1, 3, 4, 5, 9, 11, 12, 13, 15, 16], "nemoclaw_clust": 7, "nemoclaw_sandbox_polici": 7, "nemotron": 5, "net": [8, 16], "network": [0, 2, 4, 5, 6, 8, 12, 14, 16], "network_polici": [5, 6, 9, 13, 14, 16], "new": [7, 14, 16], "node": [8, 9, 16], "non": 8, "none": [8, 15], "nor": 9, "normal": 9, "note": 8, "noth": 4, "now": 1, "npm": 9, "npm_registri": 9, "npmj": 9, "null": [8, 9, 16], "number": 9, "nv": [1, 4], "nvidia": [1, 3, 5, 6, 7, 8, 13, 15, 16], "nvidia_api_kei": [5, 15], "nvidia_infer": 16, "o": [9, 12], "object": [8, 16], "often": 16, "omit": [7, 9], "onc": [1, 5, 16], "one": [0, 5, 6, 7, 11, 12, 15, 16, 17], "ones": 12, "onli": [0, 2, 5, 6, 7, 8, 9, 13, 14, 16, 17], "open": [0, 2, 7, 11, 12, 13], "openai": [5, 6, 8, 15], "openai_api_kei": [5, 15], "openai_base_url": 5, "openclaw": [1, 2, 4, 11, 12], "opencod": [2, 7, 8, 15, 16], "opencode_api_kei": 15, "openrouter_api_kei": 15, "openshel": [3, 5, 6, 7, 8, 9, 11, 13, 14, 15, 16], "openshell_sandbox_polici": 14, "oper": [7, 16], "option": [1, 7, 9, 11, 13, 14, 16], "org": [8, 9, 14, 16], "org_nam": 14, "organ": 16, "origin": [0, 6], "other": [2, 6, 8, 16], "otherwis": 13, "out": [8, 13], "outbound": [0, 2, 6, 8, 12, 13], "outlin": 14, "outlook": [7, 15], "output": [7, 9, 12], "outsid": [2, 16], "over": [2, 8], "overli": 9, "overrid": 7, "overview": 4, "own": [1, 2, 11, 12], "pack": [8, 9, 16], "packag": [0, 1, 2, 8, 11, 12, 16], "page": [1, 3, 5, 12, 14], "pair": [8, 13], "partial": 8, "particular": 11, "pass": [0, 7, 11, 14, 15], "passthrough": [8, 9, 14], "pat": 16, "patch": [9, 14], "path": [0, 2, 6, 7, 8, 9, 11, 13, 14, 16], "pattern": [5, 9], "payload": [13, 14], "per": [0, 9, 14], "perman": 7, "permiss": [4, 9], "permit": 9, "persist": 16, "person": 16, "phase": [12, 13], "pick": [1, 6], "pid": 8, "pip": [1, 4, 8, 14, 16], "pipe": 7, "plan": 14, "plane": 0, "platform": [0, 8, 16], "pod": 0, "point": [5, 11, 12], "polici": [0, 1, 2, 3, 4, 11, 12, 15, 17], "port": [0, 8, 9, 12, 13, 14, 16], "post": [6, 8, 9, 14, 16], "pr": [8, 16], "pre": [1, 4, 8, 11, 12, 13, 15], "preconfigur": 11, "preserv": [2, 7], "press": 7, "prevent": [2, 4, 13], "print": 7, "privaci": [0, 2, 5, 6, 13], "privat": [2, 4, 13], "privileg": [2, 13], "proc": [8, 9, 16], "process": [0, 2, 8, 11, 12, 13, 16], "prod": 5, "prompt": [1, 2], "properti": 6, "protect": [0, 4, 13], "protocol": [9, 13, 14, 16], "provid": [1, 2, 4, 6, 8, 9, 11, 12, 13, 14, 17], "provis": [0, 13], "proxi": [0, 8, 9, 12, 13, 14, 16], "prss": [8, 16], "publish": 11, "pull": [1, 8, 11, 12, 14, 16], "purg": [12, 13], "purpos": [11, 12], "push": [8, 14, 16], "put": 9, "pypi": [1, 4, 8, 14, 16], "python": [1, 8, 16], "python3": [8, 16], "pythonhost": [8, 14, 16], "q": 7, "queri": [0, 13], "quickstart": [0, 2, 4, 16], "quit": 7, "rather": 6, "raw": [8, 16], "reach": [5, 8, 9, 13, 14], "reachabl": [5, 9], "read": [2, 5, 7, 8, 9, 13, 14, 15, 16, 17], "read_onli": [9, 13, 16], "read_writ": [9, 13, 16], "readabl": 7, "readi": [6, 11, 13], "readm": [11, 16], "real": 12, "reason": [5, 14], "receiv": [8, 15, 16], "recogn": 15, "reconnect": [12, 16], "record": [5, 6, 7], "recreat": [6, 9, 15, 16], "ref": [8, 9, 16], "refer": [2, 3, 4, 5, 11, 12, 13, 14, 15, 16], "refresh": 6, "refus": 12, "regist": 7, "registri": [9, 11, 12], "reject": 9, "releas": [8, 12, 13], "relev": 9, "reload": [2, 9, 13, 14, 16], "remain": 16, "remot": [0, 1, 7, 8, 12, 16], "remov": [7, 12], "repeat": [5, 7, 14], "replac": [7, 14, 16], "repo": [1, 4, 12, 14, 15, 17], "report": [8, 16], "repositori": [8, 11, 16], "request": [5, 6, 7, 8, 9, 11, 13], "requir": [5, 7, 8, 9, 15], "rerout": [2, 13], "resolv": [8, 11, 12], "resourc": [12, 13], "respons": [5, 6], "rest": [0, 8, 9, 13, 14, 16], "restart": 9, "restrict": [2, 9, 13], "retriev": 12, "return": [0, 12], "reus": 14, "reusabl": 2, "review": [2, 11], "revis": 14, "rewrit": 5, "role": [0, 5], "root": 9, "rout": [0, 2, 4, 8, 13], "router": [0, 5, 6], "rule": [0, 1, 5, 6, 8, 11, 14, 16], "run": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 15], "run_as_group": [9, 13, 16], "run_as_us": [9, 13, 16], "runtim": [0, 2, 4, 7, 12, 13, 15, 16], "safe": [4, 13], "same": [0, 2, 5, 6, 8, 13, 16], "sandbox": [0, 2, 3, 4, 6, 8, 9, 17], "save": 5, "scenario": 16, "schema": [4, 13, 14, 15, 16], "scope": [1, 5, 9, 16, 17], "script": [7, 11], "sdg": 11, "seccomp": [2, 13], "second": 16, "secret": [2, 7], "section": [8, 13, 14], "secur": [0, 2, 5, 6], "see": [1, 5, 6, 7, 13, 14, 15, 16], "select": 7, "self": [2, 4, 5], "send": 2, "sensit": [0, 2], "sentri": [8, 16], "separ": 15, "serv": 5, "server": [5, 8, 9, 16], "servic": [0, 15], "session": [7, 8, 12], "set": [1, 6, 8, 9, 11, 12, 13, 14, 15, 17], "setuid": [2, 13], "setup": 1, "sever": 12, "share": [1, 4, 16], "shell": [15, 16], "ship": 13, "should": [5, 6, 16], "show": [1, 7, 8, 12, 14, 16], "simpl": [1, 4, 14], "simul": 11, "sinc": 12, "singl": [1, 7, 11, 12], "sk": 15, "skill": [1, 11], "skip": [1, 16], "smart": [8, 16], "so": [2, 8, 11, 15, 16], "socket": 8, "someth": 13, "sourc": [1, 2, 7, 12, 14, 16], "special": 6, "specif": 12, "specifi": [7, 12, 15], "split": 13, "spot": 12, "src": 12, "ssh": [0, 2, 7], "stai": [5, 6], "standalon": 8, "standard": 16, "start": [0, 7, 9, 12, 13, 16, 17], "startup": [7, 11], "state": [0, 7], "static": [9, 13, 16], "statsig": [8, 16], "statu": [1, 12, 14], "step": 17, "stop": [7, 12], "storag": 9, "store": [15, 16], "stream": [7, 12, 13, 14], "string": 9, "strip": [0, 6, 14], "structur": 14, "subcommand": 7, "subdomain": 9, "submiss": 11, "subsequ": [1, 7], "success": 5, "successfulli": 16, "sudo": [2, 13], "summar": 2, "supervis": 0, "suppli": [5, 6, 11, 12, 13, 15], "support": [5, 8, 9, 11, 13, 16], "sure": [1, 16], "switch": 5, "sync": 13, "syntax": 9, "synthet": 11, "syscal": 2, "system": [4, 9, 11, 13], "t": 12, "tab": [1, 7], "tabl": [2, 8], "tail": [7, 12, 14, 16], "tailor": 1, "take": 9, "target": [1, 7], "tcp": [8, 9, 13, 14], "team": 2, "telemetri": 8, "term": [7, 12, 14], "termin": [0, 8, 9, 12, 13, 14, 16], "test": 16, "than": 6, "theft": 2, "thei": [2, 4, 12], "them": [2, 9, 13, 15, 16], "thi": [1, 2, 3, 5, 7, 9, 12, 13, 14, 15, 16], "thing": [13, 16], "those": 13, "threat": 2, "three": [0, 13], "through": [0, 5, 6, 8, 9, 12, 13, 17], "throughout": 16, "time": [7, 9, 12, 14], "timeout": 14, "titl": 16, "tl": [0, 8, 9, 13, 14, 16], "tmp": [8, 9, 13, 16], "togeth": 0, "token": [11, 12, 13, 15, 16], "tool": [11, 15], "torn": 13, "total": 9, "tradeoff": 2, "traffic": [0, 2, 4, 5, 6, 8, 9], "trail": [7, 12, 15], "transpar": 0, "travers": 9, "treat": [2, 6, 16], "tree": 9, "triag": 14, "true": [9, 16], "trust": 16, "try": [12, 16], "tunnel": [0, 7], "tutori": [1, 4, 12, 16], "two": [1, 4, 5, 6, 16], "type": [1, 5, 7, 9, 16], "typic": [9, 15], "uid": 9, "unapprov": 2, "unauthor": [2, 4, 13], "unavail": 9, "uncontrol": 4, "under": [2, 9, 11, 13, 16], "understand": 2, "unexpectedli": 12, "unix": 9, "unprivileg": [2, 13], "unrestrict": 2, "up": [1, 2, 6, 7, 11, 12, 13, 14, 15, 17], "updat": [6, 8, 9, 14, 15, 16], "upgrad": [1, 4], "upload": [2, 7, 8, 9, 12, 16], "upstream": 5, "urandom": [8, 9, 16], "url": [1, 4, 9], "urm": [1, 4], "us": [0, 7, 8, 9, 12, 13, 14, 15, 16], "usag": [2, 7], "user": [0, 5, 7, 8, 9, 13, 15], "usernam": [14, 16], "usr": [8, 9, 13, 14, 16], "uv": [1, 4, 8, 14, 16], "v": [7, 8, 12, 13, 16], "v1": [5, 6], "valid": [9, 14], "valu": [5, 7, 8, 9, 15], "var": [8, 16], "variabl": [4, 14, 15, 16], "venv": [1, 8, 16], "verifi": 14, "version": [2, 5, 7, 13, 14, 16], "via": 8, "view": [7, 13], "violat": 9, "virtual": 1, "visualstudio": [8, 16], "vo": [8, 16], "vsasset": [8, 16], "vscode": [8, 9, 16], "wa": [5, 7], "wai": [6, 15, 16], "wait": [14, 16], "walk": [12, 17], "walkthrough": 14, "want": [5, 11, 12, 13, 15, 16], "warn": 12, "well": 16, "went": 13, "wget": [8, 16], "what": [2, 9, 12, 13, 14, 15, 16], "when": [1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15], "whenev": 14, "where": [2, 9, 16], "whether": 9, "which": [0, 7, 9, 14], "while": [2, 16], "whose": 11, "wildcard": 9, "window": 12, "within": 12, "without": [2, 5, 6, 7, 8, 9, 12, 13, 14, 15, 16], "work": [1, 5, 8, 9, 12, 13, 16], "workdir": 8, "workflow": [11, 12, 13, 14, 16, 17], "workstat": 0, "would": 9, "write": [1, 2, 8, 9, 11, 12, 13, 14, 15, 17], "wrong": 13, "yaml": [2, 7, 8, 9, 11, 12, 14, 15, 16], "ye": [1, 8, 9], "you": [1, 5, 7, 8, 11, 12, 13, 14, 15, 16], "your": [0, 2, 4, 5, 7, 11, 13, 14, 15, 16], "yourself": 15, "zero": 1, "zsh": 7, "zshrc": 7}, "titles": ["How OpenShell Works", "Quickstart", "Overview of NVIDIA OpenShell", "Release Notes", "NVIDIA OpenShell", "Configure Inference Routing", "About Inference Routing", "CLI Reference", "Default Policy Reference", "Policy Schema Reference", "License", "Community Sandboxes", "Create and Manage Sandboxes", "About Sandboxes", "Customize Sandbox Policies", "Providers", "Set Up a Sandbox with GitHub Repo Access", "Tutorials"], "titleterms": {"0": 3, "1": [3, 5, 16], "2": [5, 16], "3": [5, 16], "4": [5, 16], "5": 16, "It": 5, "With": 15, "about": [6, 13], "access": [9, 13, 16], "activ": 5, "agent": 8, "alreadi": 16, "api": 6, "appli": 14, "ar": 11, "attach": 15, "auto": 15, "bare": 15, "binari": 9, "block": 8, "built": [7, 13], "case": 2, "catalog": 11, "cli": [1, 7], "command": 7, "common": 2, "commun": [11, 12], "compat": 8, "complet": 7, "compon": 0, "config": 5, "configur": 5, "connect": [1, 12], "contribut": 11, "control": 2, "creat": [1, 5, 7, 12, 15, 16], "credenti": 15, "current": 11, "custom": [12, 14], "debug": 14, "default": [8, 13], "delet": 12, "deni": 14, "deploy": 0, "discoveri": 15, "endpoint": [5, 9], "entri": 9, "environ": 7, "exampl": [9, 14], "exist": 2, "explicit": 15, "explor": 4, "file": 12, "filesystem": 9, "first": 1, "flag": 7, "flow": 0, "form": 15, "forward": 7, "from": [5, 12, 15], "full": 9, "gatewai": [1, 7], "get": [4, 7], "github": 16, "glanc": 2, "have": 16, "help": 7, "how": [0, 6], "imag": 12, "infer": [5, 6, 7], "inspect": 12, "instal": 1, "interact": 12, "iter": [14, 16], "kei": 15, "landlock": 9, "layer": 2, "level": 9, "licens": 10, "lifecycl": 13, "list": 12, "local": [6, 15], "log": [7, 12], "manag": [12, 15], "mode": 0, "monitor": 12, "nemoclaw": 7, "network": [9, 13], "next": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "note": 3, "nvidia": [2, 4], "object": 9, "openshel": [0, 1, 2, 4], "other": 11, "overview": 2, "part": 5, "pattern": 6, "polici": [7, 8, 9, 13, 14, 16], "port": 7, "prerequisit": [1, 16], "process": 9, "protect": 2, "provid": [5, 7, 15, 16], "quick": 14, "quickstart": 1, "refer": [7, 8, 9], "releas": 3, "repo": 16, "request": [0, 14], "risk": 2, "rout": [5, 6], "rule": [9, 13], "run": [14, 16], "sandbox": [1, 5, 7, 11, 12, 13, 14, 15, 16], "schema": 9, "set": [5, 7, 16], "shell": 7, "shortcut": 15, "sourc": 11, "ssh": 12, "start": [4, 14], "statu": 7, "step": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "structur": [9, 13], "support": [6, 15], "termin": 7, "top": 9, "transfer": 12, "tree": 7, "tutori": 17, "type": 15, "up": 16, "updat": [5, 7], "us": [2, 5, 11], "variabl": 7, "verifi": [5, 16], "version": 9, "view": 12, "what": 11, "why": 2, "work": [0, 6], "write": 16, "your": [1, 12]}})
\ No newline at end of file
diff --git a/pr-preview/pr-195/tutorials/github-sandbox.html b/pr-preview/pr-195/tutorials/github-sandbox.html
index 234833830..869245227 100644
--- a/pr-preview/pr-195/tutorials/github-sandbox.html
+++ b/pr-preview/pr-195/tutorials/github-sandbox.html
@@ -433,6 +433,14 @@
Step 1: Create a GitHub Provider
+
+
Already have a sandbox running?
+
If you followed the Quickstart and already have a sandbox without a GitHub provider, you have two options:
+
+Add a provider to a new sandbox — delete the existing sandbox, create the provider below, and recreate the sandbox with --provider my-github in Step 3.
Set the token inside the sandbox — connect with nemoclaw sandbox connect <name> and run export GITHUB_TOKEN=<your-token>. This skips the provider workflow but the token is not persisted across sandbox recreations.
+
Create a provider that reads your GitHub token from the environment:
$ nemoclaw provider create --name my-github --type github --from-existing