From 95cf286bf50003da00a60a11a3ae19c7de492a32 Mon Sep 17 00:00:00 2001
From: kirit93 <kirit93@users.noreply.github.com>
Date: Tue, 10 Mar 2026 16:24:14 +0000
Subject: [PATCH] =?UTF-8?q?Deploy=20preview=20for=20PR=20195=20?=
 =?UTF-8?q?=F0=9F=9B=AB?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pr-preview/pr-195/about/get-started.html      | 29 ++++++++++++++++---
 pr-preview/pr-195/searchindex.js              |  2 +-
 .../pr-195/tutorials/github-sandbox.html      |  8 +++++
 3 files changed, 34 insertions(+), 5 deletions(-)

diff --git a/pr-preview/pr-195/about/get-started.html b/pr-preview/pr-195/about/get-started.html
index a2aadd17c..498a1cad7 100644
--- a/pr-preview/pr-195/about/get-started.html
+++ b/pr-preview/pr-195/about/get-started.html
@@ -430,20 +430,40 @@
 </pre></div>
 </div>
 </section>
+<section id="connect-to-a-gateway">
+<h2>Connect to a Gateway<a class="headerlink" href="#connect-to-a-gateway" title="Link to this heading">#</a></h2>
+<div class="sd-tab-set docutils">
+<input checked="checked" id="sd-tab-item-0" name="sd-tab-set-0" type="radio">
+<label class="sd-tab-label" for="sd-tab-item-0">
+Local (Docker)</label><div class="sd-tab-content docutils">
+<p>If Docker is running on your machine, the CLI creates a local gateway automatically when you create your first sandbox. No additional setup is needed — skip to the next step.</p>
+</div>
+<input id="sd-tab-item-1" name="sd-tab-set-0" type="radio">
+<label class="sd-tab-label" for="sd-tab-item-1">
+Remote (Brev)</label><div class="sd-tab-content docutils">
+<p>Deploy an OpenShell gateway on Brev with the <a class="reference external" href="https://brev.nvidia.com/launchable/deploy/now?launchableID=env-3AaK9NmCzWp3pVyUDNNFBt805FT" rel="noreferer noopener" target="_blank">OpenShell Launchable</a>, then connect to it:</p>
+<div class="highlight-console notranslate"><div class="highlight"><pre><span></span><span class="gp">$ </span>nemoclaw<span class="w"> </span>gateway<span class="w"> </span>add<span class="w"> </span>&lt;your-brev-instance-url&gt;
+<span class="gp">$ </span>nemoclaw<span class="w"> </span>status
+</pre></div>
+</div>
+<p>Once <code class="docutils literal notranslate"><span class="pre">nemoclaw</span> <span class="pre">status</span></code> shows the gateway as healthy, all subsequent commands target that remote instance.</p>
+</div>
+</div>
+</section>
 <section id="create-your-first-openshell-sandbox">
 <h2>Create Your First OpenShell Sandbox<a class="headerlink" href="#create-your-first-openshell-sandbox" title="Link to this heading">#</a></h2>
 <p>Choose the tab that matches your agent:</p>
 <div class="sd-tab-set docutils">
-<input checked="checked" id="sd-tab-item-0" name="sd-tab-set-0" type="radio">
-<label class="sd-tab-label" for="sd-tab-item-0">
+<input checked="checked" id="sd-tab-item-2" name="sd-tab-set-1" type="radio">
+<label class="sd-tab-label" for="sd-tab-item-2">
 Claude Code</label><div class="sd-tab-content docutils">
 <div class="highlight-console notranslate"><div class="highlight"><pre><span></span><span class="gp">$ </span>nemoclaw<span class="w"> </span>sandbox<span class="w"> </span>create<span class="w"> </span>--<span class="w"> </span>claude
 </pre></div>
 </div>
 <p>The CLI prompts you to create a provider from local credentials — type <code class="docutils literal notranslate"><span class="pre">yes</span></code> to continue. If <code class="docutils literal notranslate"><span class="pre">ANTHROPIC_API_KEY</span></code> is set in your environment, it is picked up automatically. If not, you can configure it from inside the sandbox after it launches.</p>
 </div>
-<input id="sd-tab-item-1" name="sd-tab-set-0" type="radio">
-<label class="sd-tab-label" for="sd-tab-item-1">
+<input id="sd-tab-item-3" name="sd-tab-set-1" type="radio">
+<label class="sd-tab-label" for="sd-tab-item-3">
 Community Sandbox</label><div class="sd-tab-content docutils">
 <div class="highlight-console notranslate"><div class="highlight"><pre><span></span><span class="gp">$ </span>nemoclaw<span class="w"> </span>sandbox<span class="w"> </span>create<span class="w"> </span>--from<span class="w"> </span>openclaw
 </pre></div>
@@ -514,6 +534,7 @@ Community Sandbox</label><div class="sd-tab-content docutils">
     <ul class="visible nav section-nav flex-column">
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#prerequisites">Prerequisites</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#install-the-openshell-cli">Install the OpenShell CLI</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#connect-to-a-gateway">Connect to a Gateway</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#create-your-first-openshell-sandbox">Create Your First OpenShell Sandbox</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#next-steps">Next Steps</a></li>
 </ul>
diff --git a/pr-preview/pr-195/searchindex.js b/pr-preview/pr-195/searchindex.js
index 1c63c3822..8a2fa5ed7 100644
--- a/pr-preview/pr-195/searchindex.js
+++ b/pr-preview/pr-195/searchindex.js
@@ -1 +1 @@
-Search.setIndex({"alltitles": {"0.1.0": [[3, "id1"]], "About Inference Routing": [[6, null]], "About Sandboxes": [[13, null]], "Access Levels": [[9, "access-levels"]], "Agent Compatibility": [[8, "agent-compatibility"]], "Attach Providers to Sandboxes": [[15, "attach-providers-to-sandboxes"]], "Auto-Discovery Shortcut": [[15, "auto-discovery-shortcut"]], "Bare Key Form": [[15, "bare-key-form"]], "Binary Object": [[9, "binary-object"]], "Built-in Default Policy": [[13, "built-in-default-policy"]], "Built-in Help": [[7, "built-in-help"]], "CLI Reference": [[7, null]], "Command Tree": [[7, "command-tree"]], "Common Risks and Controls": [[2, "common-risks-and-controls"]], "Common Use Cases": [[2, "common-use-cases"]], "Community Sandboxes": [[11, null]], "Components": [[0, "components"]], "Configure Inference Routing": [[5, null]], "Connect to a Sandbox": [[12, "connect-to-a-sandbox"]], "Contribute a Community Sandbox": [[11, "contribute-a-community-sandbox"]], "Create Your First OpenShell Sandbox": [[1, "create-your-first-openshell-sandbox"]], "Create a Provider": [[15, "create-a-provider"]], "Create a Sandbox": [[12, "create-a-sandbox"]], "Create and Manage Sandboxes": [[12, null]], "Create from a Community Sandbox or Custom Image": [[12, "create-from-a-community-sandbox-or-custom-image"]], "Current Catalog": [[11, "current-catalog"]], "Customize Sandbox Policies": [[14, null]], "Debug Denied Requests": [[14, "debug-denied-requests"]], "Default Policy Blocks": [[8, "default-policy-blocks"]], "Default Policy Reference": [[8, null]], "Delete Sandboxes": [[12, "delete-sandboxes"]], "Deployment Modes": [[0, "deployment-modes"]], "Endpoint Object": [[9, "endpoint-object"]], "Environment Variables": [[7, "environment-variables"]], "Examples": [[14, "examples"]], "Explore": [[4, "explore"]], "Filesystem Policy": [[9, "filesystem-policy"]], "From Local Credentials": [[15, "from-local-credentials"]], "Full Example": [[9, "full-example"]], "Gateway Commands": [[7, "gateway-commands"]], "Get Started": [[4, "get-started"]], "How OpenShell Works": [[0, null]], "How a Request Flows": [[0, "how-a-request-flows"]], "How inference.local Works": [[6, "how-inference-local-works"]], "Inference Commands": [[7, "inference-commands"]], "Install the OpenShell CLI": [[1, "install-the-openshell-cli"]], "Interactive SSH": [[12, "interactive-ssh"]], "Iterate on a Running Sandbox": [[14, "iterate-on-a-running-sandbox"]], "Landlock": [[9, "landlock"]], "License": [[10, null]], "List and Inspect Sandboxes": [[12, "list-and-inspect-sandboxes"]], "Manage Providers": [[15, "manage-providers"]], "Monitor your Sandbox": [[12, "monitor-your-sandbox"]], "NVIDIA OpenShell": [[4, null]], "Network Access Rules": [[13, "network-access-rules"]], "Network Policies": [[9, "network-policies"]], "Network Policy Entry": [[9, "network-policy-entry"]], "Next Steps": [[0, "next-steps"], [1, "next-steps"], [2, "next-steps"], [5, "next-steps"], [6, "next-steps"], [11, "next-steps"], [12, "next-steps"], [13, "next-steps"], [14, "next-steps"], [15, "next-steps"], [16, "next-steps"]], "Other Sources": [[11, "other-sources"]], "Overview of NVIDIA OpenShell": [[2, null]], "Policy Commands": [[7, "policy-commands"]], "Policy Schema Reference": [[9, null]], "Policy Structure": [[13, "policy-structure"]], "Port Forwarding Commands": [[7, "port-forwarding-commands"]], "Prerequisites": [[1, "prerequisites"], [16, "prerequisites"]], "Process": [[9, "process"]], "Protection Layers at a Glance": [[2, "protection-layers-at-a-glance"]], "Provider Commands": [[7, "provider-commands"]], "Provider Create Flags": [[7, "provider-create-flags"]], "Providers": [[15, null]], "Quick Start: Apply a Custom Policy": [[14, "quick-start-apply-a-custom-policy"]], "Quickstart": [[1, null]], "Release Notes": [[3, null]], "Rule Object": [[9, "rule-object"]], "Sandbox Commands": [[7, "sandbox-commands"]], "Sandbox Create Flags": [[7, "sandbox-create-flags"]], "Sandbox Lifecycle": [[13, "sandbox-lifecycle"]], "Set Up a Sandbox with GitHub Repo Access": [[16, null]], "Shell Completions": [[7, "shell-completions"]], "Status, Logs, and Terminal": [[7, "status-logs-and-terminal"]], "Step 1: Create a GitHub Provider": [[16, "step-1-create-a-github-provider"]], "Step 1: Create a Provider": [[5, "step-1-create-a-provider"]], "Step 2: Set Inference Routing": [[5, "step-2-set-inference-routing"]], "Step 2: Write the Policy": [[16, "step-2-write-the-policy"]], "Step 3: Create the Sandbox": [[16, "step-3-create-the-sandbox"]], "Step 3: Verify the Active Config": [[5, "step-3-verify-the-active-config"]], "Step 4: Update Part of the Config": [[5, "step-4-update-part-of-the-config"]], "Step 4: Verify Access": [[16, "step-4-verify-access"]], "Step 5: Iterate on the Policy": [[16, "step-5-iterate-on-the-policy"]], "Supported API Patterns": [[6, "supported-api-patterns"]], "Supported Provider Types": [[15, "supported-provider-types"]], "Top-Level Structure": [[9, "top-level-structure"]], "Transfer Files": [[12, "transfer-files"]], "Tutorials": [[17, null]], "Use It from a Sandbox": [[5, "use-it-from-a-sandbox"]], "Use a Community Sandbox": [[11, "use-a-community-sandbox"]], "Verify the Endpoint from a Sandbox": [[5, "verify-the-endpoint-from-a-sandbox"]], "Version": [[9, "version"]], "View Logs": [[12, "view-logs"]], "What Are Community Sandboxes": [[11, "what-are-community-sandboxes"]], "Why OpenShell Exists": [[2, "why-openshell-exists"]], "With Explicit Credentials": [[15, "with-explicit-credentials"]], "nemoclaw inference get": [[7, "nemoclaw-inference-get"]], "nemoclaw inference set": [[7, "nemoclaw-inference-set"]], "nemoclaw inference update": [[7, "nemoclaw-inference-update"]]}, "docnames": ["about/architecture", "about/get-started", "about/overview", "about/release-notes", "index", "inference/configure", "inference/index", "reference/cli", "reference/default-policy", "reference/policy-schema", "resources/eula", "sandboxes/community-sandboxes", "sandboxes/create-and-manage", "sandboxes/index", "sandboxes/policies", "sandboxes/providers", "tutorials/github-sandbox", "tutorials/index"], "envversion": {"sphinx": 62, "sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx.ext.viewcode": 1}, "filenames": ["about/architecture.md", "about/get-started.md", "about/overview.md", "about/release-notes.md", "index.md", "inference/configure.md", "inference/index.md", "reference/cli.md", "reference/default-policy.md", "reference/policy-schema.md", "resources/eula.md", "sandboxes/community-sandboxes.md", "sandboxes/create-and-manage.md", "sandboxes/index.md", "sandboxes/policies.md", "sandboxes/providers.md", "tutorials/github-sandbox.md", "tutorials/index.md"], "indexentries": {}, "objects": {}, "objnames": {}, "objtypes": {}, "terms": {"": [6, 7, 8, 9, 11, 13, 15, 16], "0": [9, 14], "1": [9, 13, 14], "10": 5, "12": 1, "124": 14, "15": 5, "168": 5, "192": 5, "2": 14, "256": 9, "3": 1, "30b": 5, "4": 14, "4096": 9, "443": [8, 9, 13, 14, 16], "5m": 12, "61": 12, "A": [5, 6, 8, 9, 12, 13, 16], "And": 16, "At": 11, "By": 16, "For": [0, 2, 3, 9, 12, 13, 14, 16], "If": [1, 6, 8, 11, 12, 13, 14, 15], "It": [2, 3, 4, 6, 8, 13], "No": [6, 9, 13], "One": [6, 9], "Or": 5, "That": 2, "The": [0, 1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "Then": [14, 16], "To": [5, 11, 14, 16], "With": 2, "a3b": 5, "abc123": 15, "abi": [8, 9, 13], "about": [4, 5, 7, 12, 14], "abov": [14, 15], "absolut": 9, "accept": [7, 11], "access": [1, 2, 4, 5, 6, 7, 8, 12, 14, 15, 17], "across": [0, 2, 16], "act": 0, "action": [8, 12, 14, 16], "activ": [1, 4, 7, 9, 12, 13, 15], "ad": [14, 15], "add": [7, 8, 9, 11, 12, 14, 16], "addit": [15, 16], "address": 9, "adjust": 14, "after": [1, 7, 12, 14, 16], "ag": 12, "again": 12, "against": [0, 11, 12, 13, 14], "agent": [0, 1, 2, 3, 4, 7, 9, 11, 12, 13, 15, 16], "ai": [2, 3, 4, 8, 13, 15], "aliv": 7, "all": [0, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "allow": [0, 2, 6, 8, 9, 13, 14, 16], "allowed_rout": [13, 14], "allowlist": 14, "alon": 9, "along": 16, "alpha": [14, 16], "alreadi": 15, "also": [0, 11, 12], "altern": 14, "an": [0, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "ani": [5, 6, 7, 9, 11, 15, 16], "anoth": [12, 16, 17], "anthrop": [5, 6, 8, 15, 16], "anthropic_api_kei": [1, 5, 15, 16], "anyth": [5, 11], "api": [0, 1, 2, 4, 5, 8, 9, 11, 12, 13, 14, 15, 16], "api_kei": [5, 15], "app": [8, 16], "append": 7, "appli": [2, 6, 7, 8, 11, 13], "applic": [0, 5], "approv": 2, "ar": [2, 5, 6, 7, 8, 9, 12, 13, 15, 16], "architectur": [0, 2, 4], "argument": 7, "artifactori": [1, 4], "ask": 16, "assign": 7, "assist": 5, "associ": 9, "attach": [7, 12], "attempt": 2, "audit": [2, 9], "auth": 0, "authent": 5, "auto": 7, "automat": [0, 1, 9], "autonom": [2, 4], "avail": [7, 11], "avoid": 14, "awar": 0, "back": [7, 9, 11], "backend": [0, 2, 4, 5, 6, 7], "background": [7, 12, 16], "bare": 7, "base": [0, 11], "base_url": 5, "bash": [7, 8, 16], "befor": [0, 1, 5, 7, 9, 12, 13, 14, 16], "begin": [1, 16], "behav": 16, "behavior": [2, 9], "behind": 6, "being": 13, "belong": 5, "below": [2, 7, 9], "best_effort": [8, 9, 13, 16], "between": 12, "bin": [1, 8, 9, 13, 14, 16], "binari": [0, 8, 13, 14, 16], "blank": 16, "block": [0, 2, 9, 12, 13, 14, 16], "bool": 9, "both": [0, 7, 8, 13, 16], "boundari": 0, "box": [8, 13], "bravo": [14, 16], "breakdown": [13, 14], "bring": 2, "broad": 9, "broker": 0, "brows": [12, 13, 15, 16], "build": [7, 8, 11, 12], "built": [1, 2, 11, 12, 15], "bundl": [1, 11, 12], "call": [0, 2, 4, 5, 6, 7, 8, 13, 14, 15, 16], "can": [0, 1, 2, 5, 8, 9, 11, 12, 13, 14, 15, 16], "cannot": [15, 16], "capabl": [2, 4], "case": 0, "catalog": [1, 5, 8, 12, 13, 15], "categori": 9, "caus": 12, "chang": [0, 5, 6, 9, 14, 16], "charact": 9, "chat": [5, 6], "check": [0, 12, 13, 14], "choos": [1, 5], "ci_job_token": 15, "class": 15, "claud": [1, 2, 4, 7, 8, 9, 12, 14, 15, 16], "claude_api_kei": 15, "claude_cod": 16, "cli": [0, 2, 4, 5, 11, 12, 14, 15, 16], "client": 5, "clone": [0, 8, 16], "cloud": 2, "cluster": [0, 7, 12, 15], "code": [0, 1, 2, 5, 6, 7, 8, 11, 12, 14, 15, 16], "codex": [7, 8, 15], "com": [1, 4, 6, 8, 9, 11, 12, 13, 14, 16], "combin": [2, 9, 12, 14], "come": 6, "command": [0, 1, 4, 5, 11, 12, 14, 15], "comment": 16, "commit": 16, "common": [8, 13], "commun": [1, 2, 4, 7, 13, 15], "compat": [5, 6, 9, 13, 16], "complet": [5, 6, 8, 9, 12, 13, 15, 16, 17], "complianc": 2, "compon": [2, 9], "comput": 0, "concept": 4, "config": 7, "configur": [0, 1, 4, 6, 7, 8, 9, 11, 13], "confin": 2, "confirm": [5, 14, 16], "connect": [0, 2, 5, 7, 8, 9, 13], "consid": 11, "consist": 5, "constrain": 2, "constraint": [0, 9], "contain": [0, 1, 7, 8, 9, 11, 12, 16], "container": 2, "content": 5, "context": [0, 2], "continu": 1, "contribut": 12, "control": [0, 5, 6, 9, 11, 12, 13, 14, 15, 16], "coordin": 0, "cost": 0, "cover": [3, 5, 13], "coverag": 8, "creat": [0, 2, 4, 8, 11, 13, 14, 17], "creation": [2, 7, 9, 12, 13, 14, 16], "credenti": [0, 1, 2, 3, 4, 5, 6, 7, 11, 12, 13, 14, 16], "curl": [5, 8, 13, 16], "current": [5, 7, 9, 14, 15, 16], "custom": [1, 2, 4, 8, 11, 13, 15, 16], "d": [5, 7], "danger": [2, 13], "dashboard": [7, 8, 12, 14], "data": [2, 4, 7, 11, 13], "decis": [0, 7, 12], "declar": [2, 4, 8, 9], "decrypt": [0, 9, 14], "default": [2, 7, 9, 11, 14, 16], "defens": [0, 2], "defin": [6, 8, 9, 11, 13, 15], "definit": [0, 1, 11, 14], "delet": [7, 13, 15], "deni": [0, 2, 6, 8, 12, 13, 16], "denial": 14, "depend": [6, 16], "deploi": [0, 7, 8], "deploy": 7, "depth": [0, 2], "describ": [11, 14], "descript": [5, 7, 9, 11, 13], "design": [2, 11], "desktop": 1, "destin": [0, 2, 8, 9, 13, 14], "destroi": [7, 9], "detail": [2, 3, 4, 5, 6, 7, 12, 13], "detect": 15, "dev": [8, 9, 11, 12, 16], "develop": [2, 8], "diagnos": 12, "differ": [9, 16], "dir": [11, 12], "directli": [0, 5, 6, 11, 15], "directori": [7, 9, 11, 12], "disabl": 8, "disallow": 9, "discov": [7, 15], "discoveri": 6, "disk": [9, 11, 13], "displai": 9, "distinct": 16, "do": [6, 15, 16], "docker": [0, 1, 8, 12, 16], "dockerfil": [7, 11, 12], "document": [7, 9], "doe": [5, 15], "domain": 2, "don": 12, "down": [0, 13], "download": [7, 8, 12, 16], "dummi": 5, "dure": 13, "dynam": [9, 13, 16], "e": [13, 16], "each": [0, 1, 3, 7, 8, 9, 11, 13, 14, 15, 16], "edit": [14, 16], "effect": 9, "egress": 0, "either": 9, "elev": 13, "els": 11, "empti": 5, "enabl": [0, 8, 9, 14], "encrypt": 9, "end": [4, 5, 11, 12, 14, 16], "endpoint": [0, 2, 6, 8, 13, 14, 16], "enforc": [0, 1, 2, 3, 9, 13, 14, 16], "engin": [0, 13], "enterpris": 2, "entiti": 15, "entri": [7, 8, 12, 13, 14, 16], "entrypoint": 11, "env": 7, "environ": [1, 2, 4, 5, 11, 12, 13, 14, 15, 16], "error": [8, 12, 13, 16], "escal": 2, "escap": 9, "especi": 12, "etc": [0, 8, 9, 13, 16], "evalu": 6, "event": 12, "everi": [0, 5, 6, 7, 9, 13, 14, 15], "everyth": [7, 16], "ex": 8, "exactli": [4, 16], "exampl": [7, 11, 12, 13, 16], "exce": 9, "exclus": 9, "execut": [2, 3, 4, 7, 8, 9, 13], "exercis": 16, "exfiltr": [2, 4, 13], "exist": [5, 7, 11, 12, 15, 16], "exit": [7, 12, 14, 16], "explain": 12, "explicit": 2, "explicitli": [7, 9, 14], "export": [14, 16], "expos": 6, "exposur": 13, "express": 16, "extend": 16, "extens": 8, "extern": [0, 2, 5, 6, 15], "f": 7, "fail": [9, 14, 16], "failur": 2, "fall": [7, 9], "fastest": 15, "featur": [8, 16], "fetch": [8, 16], "field": [5, 7, 9, 13, 14, 15], "file": [2, 4, 7, 8, 11, 13, 14, 16], "filesystem": [0, 2, 8, 13], "filesystem_polici": [9, 13, 16], "filter": [7, 12, 13], "find": 15, "fine": 9, "finer": 16, "finish": 17, "first": [0, 2, 3, 4, 13, 14, 15, 16], "fish": 7, "fix": 14, "flag": [1, 8, 11, 12, 14, 15, 16], "flow": 5, "follow": [1, 7, 8, 11, 12, 14, 15], "forc": 7, "fork": 11, "format": 7, "forward": [0, 5, 6, 9, 12], "foundat": 11, "four": [0, 2], "from": [0, 1, 4, 6, 7, 11, 13, 14, 16, 17], "full": [1, 7, 8, 12, 13, 14, 16], "fulli": 12, "g": [13, 16], "gallerycdn": [8, 16], "gatewai": [0, 5, 6, 12], "gener": [5, 6, 7, 11, 15], "get": [1, 5, 6, 8, 9, 12, 14, 15, 16], "gh": [8, 9, 14, 15, 16], "gh_token": [15, 16], "gid": 9, "git": [0, 8, 9, 16], "github": [1, 3, 4, 7, 8, 9, 12, 14, 15, 17], "github_api": 16, "github_git": 16, "github_repo": 14, "github_rest_api": 9, "github_token": [15, 16], "githubusercont": [8, 16], "gitlab": [7, 15], "gitlab_token": 15, "give": 2, "glab": 15, "glab_token": 15, "glob": 9, "go": [2, 5], "goe": 13, "govern": 4, "grain": 9, "grant": [8, 16], "granular": 14, "graphql": [14, 16], "group": [8, 9, 13], "grow": 11, "guid": [1, 4, 17], "guidelin": 11, "h": 5, "ha": 13, "handl": [6, 9], "happen": 12, "hard_requir": 9, "hash": 14, "have": [1, 11, 12, 16], "head": [9, 14, 16], "header": 14, "health": 7, "hello": 5, "help": 5, "here": [1, 7], "highest": [8, 9, 13], "highlight": 3, "hint": [7, 13], "hold": 5, "host": [0, 2, 4, 5, 6, 7, 8, 9, 12, 13, 14, 16], "hostnam": 9, "hot": [2, 6, 9, 13, 14, 16], "how": [1, 2, 5, 9, 11, 12, 13, 16], "http": [0, 1, 4, 5, 6, 7, 8, 9, 13, 14, 16], "human": 7, "i": [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "id": [5, 7], "ident": [0, 2, 9], "identifi": [0, 7, 8, 9], "ignor": 5, "imag": [1, 2, 4, 7, 11], "import": 5, "inaccess": 9, "includ": [0, 7, 8, 13], "include_workdir": [9, 16], "index": [1, 4], "individu": [9, 12], "infer": [0, 2, 4, 8, 12, 13, 14, 16], "info": [7, 8, 9, 16], "inform": [7, 12], "infrastructur": [0, 4], "initi": 14, "inject": [0, 6, 7, 12, 13, 15, 16], "input": 5, "insid": [0, 1, 5, 6, 7, 8, 9, 16], "inspect": [7, 9, 13, 14, 15], "inspect_for_infer": 12, "instal": [0, 2, 4, 8, 14, 16], "instead": 5, "instruct": 5, "integ": 9, "integr": [8, 15, 16], "intend": 9, "interact": [7, 16], "intercept": [0, 5, 12], "intern": 2, "introduc": 3, "invalid_argu": 9, "invok": 11, "io": [8, 16], "ip": 9, "isn": 12, "isol": [0, 2, 3, 7, 13], "issu": [8, 14, 16], "iter": 12, "its": [4, 7, 8, 9], "j": 7, "json": 5, "k": 7, "k3": 0, "keep": [0, 2, 4, 7, 12, 14, 16], "kei": [2, 6, 7, 9, 11, 12, 13, 16], "kernel": [0, 2, 3, 8, 9, 13], "known": 15, "kubectl": 7, "kubernet": 0, "l4": 8, "label": 12, "landlock": [2, 8, 13, 16], "last": 7, "later": [1, 12], "latest": [11, 12], "launch": [1, 7, 11, 15], "layer": [0, 13], "learn": [0, 1, 2, 4], "let": [15, 16], "level": [2, 3, 7, 12, 13, 14, 16], "lib": [8, 9, 13, 16], "librari": 16, "lifecycl": [0, 1, 12], "like": [6, 9, 12], "line": 16, "list": [7, 8, 9, 13, 14, 15], "live": [7, 12, 14], "llm": [0, 8], "load": [9, 14], "local": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 14, 16], "locat": 0, "lock": [2, 9, 13, 16], "log": [0, 8, 9, 13, 14, 16], "logic": 9, "longer": 12, "look": [12, 14, 15, 16], "lookup": 8, "lsm": [9, 13], "machin": [1, 12], "mai": [9, 13], "make": [1, 2, 16], "manag": [0, 1, 3, 4, 5, 6, 7, 11, 13, 16], "mandatori": 9, "manipul": 11, "map": 9, "marketplac": [8, 16], "match": [0, 1, 6, 8, 9, 13, 16], "materi": 2, "md": 11, "messag": [5, 6], "metadata": [7, 8, 14], "method": [0, 6, 9, 13, 14, 16], "microsoft": [8, 15, 16], "might": [12, 16], "minimum": 11, "miss": 14, "mitig": 2, "mode": [2, 7, 9], "model": [0, 2, 5, 6, 7, 15], "modifi": [9, 14, 16], "monitor": [7, 14], "more": [3, 4, 7, 15, 16], "most": 2, "move": 13, "msecnd": [8, 16], "multipl": [7, 13, 16], "must": [8, 9, 11, 12, 13], "mutat": 8, "mutual": 9, "my": [5, 11, 12, 13, 14, 15, 16], "my_api": 13, "name": [5, 7, 9, 11, 12, 13, 14, 15, 16], "namespac": 13, "nano": 5, "navig": 7, "need": [4, 5, 6, 11, 12, 13, 14, 15, 16], "neither": 9, "nemoclaw": [0, 1, 3, 4, 5, 9, 11, 12, 13, 15, 16], "nemoclaw_clust": 7, "nemoclaw_sandbox_polici": 7, "nemotron": 5, "net": [8, 16], "network": [0, 2, 4, 5, 6, 8, 12, 14, 16], "network_polici": [5, 6, 9, 13, 14, 16], "new": [7, 14], "node": [8, 9, 16], "non": 8, "none": [8, 15], "nor": 9, "normal": 9, "note": 8, "noth": 4, "now": 1, "npm": 9, "npm_registri": 9, "npmj": 9, "null": [8, 9, 16], "number": 9, "nv": [1, 4], "nvidia": [1, 3, 5, 6, 7, 8, 13, 15, 16], "nvidia_api_kei": [5, 15], "nvidia_infer": 16, "o": [9, 12], "object": [8, 16], "often": 16, "omit": [7, 9], "onc": [5, 16], "one": [0, 5, 6, 7, 11, 12, 15, 16, 17], "ones": 12, "onli": [0, 2, 5, 6, 7, 8, 9, 13, 14, 16, 17], "open": [0, 2, 7, 11, 12, 13], "openai": [5, 6, 8, 15], "openai_api_kei": [5, 15], "openai_base_url": 5, "openclaw": [1, 2, 4, 11, 12], "opencod": [2, 7, 8, 15, 16], "opencode_api_kei": 15, "openrouter_api_kei": 15, "openshel": [3, 5, 6, 7, 8, 9, 11, 13, 14, 15, 16], "openshell_sandbox_polici": 14, "oper": [7, 16], "option": [1, 7, 9, 11, 13, 14, 16], "org": [8, 9, 14, 16], "org_nam": 14, "organ": 16, "origin": [0, 6], "other": [2, 6, 8, 16], "otherwis": 13, "out": [8, 13], "outbound": [0, 2, 6, 8, 12, 13], "outlin": 14, "outlook": [7, 15], "output": [7, 9, 12], "outsid": [2, 16], "over": [2, 8], "overli": 9, "overrid": 7, "overview": 4, "own": [1, 2, 11, 12], "pack": [8, 9, 16], "packag": [0, 1, 2, 8, 11, 12, 16], "page": [1, 3, 5, 12, 14], "pair": [8, 13], "partial": 8, "particular": 11, "pass": [0, 7, 11, 14, 15], "passthrough": [8, 9, 14], "pat": 16, "patch": [9, 14], "path": [0, 2, 6, 7, 8, 9, 11, 13, 14, 16], "pattern": [5, 9], "payload": [13, 14], "per": [0, 9, 14], "perman": 7, "permiss": [4, 9], "permit": 9, "person": 16, "phase": [12, 13], "pick": [1, 6], "pid": 8, "pip": [1, 4, 8, 14, 16], "pipe": 7, "plan": 14, "plane": 0, "platform": [0, 8, 16], "pod": 0, "point": [5, 11, 12], "polici": [0, 1, 2, 3, 4, 11, 12, 15, 17], "port": [0, 8, 9, 12, 13, 14, 16], "post": [6, 8, 9, 14, 16], "pr": [8, 16], "pre": [1, 4, 8, 11, 12, 13, 15], "preconfigur": 11, "preserv": [2, 7], "press": 7, "prevent": [2, 4, 13], "print": 7, "privaci": [0, 2, 5, 6, 13], "privat": [2, 4, 13], "privileg": [2, 13], "proc": [8, 9, 16], "process": [0, 2, 8, 11, 12, 13, 16], "prod": 5, "prompt": [1, 2], "properti": 6, "protect": [0, 4, 13], "protocol": [9, 13, 14, 16], "provid": [1, 2, 4, 6, 8, 9, 11, 12, 13, 14, 17], "provis": [0, 13], "proxi": [0, 8, 9, 12, 13, 14, 16], "prss": [8, 16], "publish": 11, "pull": [1, 8, 11, 12, 14, 16], "purg": [12, 13], "purpos": [11, 12], "push": [8, 14, 16], "put": 9, "pypi": [1, 4, 8, 14, 16], "python": [1, 8, 16], "python3": [8, 16], "pythonhost": [8, 14, 16], "q": 7, "queri": [0, 13], "quickstart": [0, 2, 4, 16], "quit": 7, "rather": 6, "raw": [8, 16], "reach": [5, 8, 9, 13, 14], "reachabl": [5, 9], "read": [2, 5, 7, 8, 9, 13, 14, 15, 16, 17], "read_onli": [9, 13, 16], "read_writ": [9, 13, 16], "readabl": 7, "readi": [6, 11, 13], "readm": [11, 16], "real": 12, "reason": [5, 14], "receiv": [8, 15, 16], "recogn": 15, "reconnect": [12, 16], "record": [5, 6, 7], "recreat": [6, 9, 15], "ref": [8, 9, 16], "refer": [2, 3, 4, 5, 11, 12, 13, 14, 15, 16], "refresh": 6, "refus": 12, "regist": 7, "registri": [9, 11, 12], "reject": 9, "releas": [8, 12, 13], "relev": 9, "reload": [2, 9, 13, 14, 16], "remain": 16, "remot": [0, 7, 8, 12, 16], "remov": [7, 12], "repeat": [5, 7, 14], "replac": [7, 14, 16], "repo": [1, 4, 12, 14, 15, 17], "report": [8, 16], "repositori": [8, 11, 16], "request": [5, 6, 7, 8, 9, 11, 13], "requir": [5, 7, 8, 9, 15], "rerout": [2, 13], "resolv": [8, 11, 12], "resourc": [12, 13], "respons": [5, 6], "rest": [0, 8, 9, 13, 14, 16], "restart": 9, "restrict": [2, 9, 13], "retriev": 12, "return": [0, 12], "reus": 14, "reusabl": 2, "review": [2, 11], "revis": 14, "rewrit": 5, "role": [0, 5], "root": 9, "rout": [0, 2, 4, 8, 13], "router": [0, 5, 6], "rule": [0, 1, 5, 6, 8, 11, 14, 16], "run": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 15, 16], "run_as_group": [9, 13, 16], "run_as_us": [9, 13, 16], "runtim": [0, 2, 4, 7, 12, 13, 15, 16], "safe": [4, 13], "same": [0, 2, 5, 6, 8, 13, 16], "sandbox": [0, 2, 3, 4, 6, 8, 9, 17], "save": 5, "scenario": 16, "schema": [4, 13, 14, 15, 16], "scope": [1, 5, 9, 16, 17], "script": [7, 11], "sdg": 11, "seccomp": [2, 13], "second": 16, "secret": [2, 7], "section": [8, 13, 14], "secur": [0, 2, 5, 6], "see": [1, 5, 6, 7, 13, 14, 15, 16], "select": 7, "self": [2, 4, 5], "send": 2, "sensit": [0, 2], "sentri": [8, 16], "separ": 15, "serv": 5, "server": [5, 8, 9, 16], "servic": [0, 15], "session": [7, 8, 12], "set": [1, 6, 8, 9, 11, 12, 13, 14, 15, 17], "setuid": [2, 13], "sever": 12, "share": [1, 4, 16], "shell": [15, 16], "ship": 13, "should": [5, 6, 16], "show": [7, 8, 12, 14, 16], "simpl": [1, 4, 14], "simul": 11, "sinc": 12, "singl": [1, 7, 11, 12], "sk": 15, "skill": [1, 11], "smart": [8, 16], "so": [2, 8, 11, 15, 16], "socket": 8, "someth": 13, "sourc": [1, 2, 7, 12, 14, 16], "special": 6, "specif": 12, "specifi": [7, 12, 15], "split": 13, "spot": 12, "src": 12, "ssh": [0, 2, 7], "stai": [5, 6], "standalon": 8, "standard": 16, "start": [0, 7, 9, 12, 13, 16, 17], "startup": [7, 11], "state": [0, 7], "static": [9, 13, 16], "statsig": [8, 16], "statu": [12, 14], "step": 17, "stop": [7, 12], "storag": 9, "store": [15, 16], "stream": [7, 12, 13, 14], "string": 9, "strip": [0, 6, 14], "structur": 14, "subcommand": 7, "subdomain": 9, "submiss": 11, "subsequ": 7, "success": 5, "successfulli": 16, "sudo": [2, 13], "summar": 2, "supervis": 0, "suppli": [5, 6, 11, 12, 13, 15], "support": [5, 8, 9, 11, 13, 16], "sure": [1, 16], "switch": 5, "sync": 13, "syntax": 9, "synthet": 11, "syscal": 2, "system": [4, 9, 11, 13], "t": 12, "tab": [1, 7], "tabl": [2, 8], "tail": [7, 12, 14, 16], "tailor": 1, "take": 9, "target": 7, "tcp": [8, 9, 13, 14], "team": 2, "telemetri": 8, "term": [7, 12, 14], "termin": [0, 8, 9, 12, 13, 14, 16], "test": 16, "than": 6, "theft": 2, "thei": [2, 4, 12], "them": [2, 9, 13, 15, 16], "thi": [1, 2, 3, 5, 7, 9, 12, 13, 14, 15, 16], "thing": [13, 16], "those": 13, "threat": 2, "three": [0, 13], "through": [0, 5, 6, 8, 9, 12, 13, 17], "throughout": 16, "time": [7, 9, 12, 14], "timeout": 14, "titl": 16, "tl": [0, 8, 9, 13, 14, 16], "tmp": [8, 9, 13, 16], "togeth": 0, "token": [11, 12, 13, 15, 16], "tool": [11, 15], "torn": 13, "total": 9, "tradeoff": 2, "traffic": [0, 2, 4, 5, 6, 8, 9], "trail": [7, 12, 15], "transpar": 0, "travers": 9, "treat": [2, 6, 16], "tree": 9, "triag": 14, "true": [9, 16], "trust": 16, "try": [12, 16], "tunnel": [0, 7], "tutori": [1, 4, 12, 16], "two": [1, 4, 5, 6, 16], "type": [1, 5, 7, 9, 16], "typic": [9, 15], "uid": 9, "unapprov": 2, "unauthor": [2, 4, 13], "unavail": 9, "uncontrol": 4, "under": [2, 9, 11, 13, 16], "understand": 2, "unexpectedli": 12, "unix": 9, "unprivileg": [2, 13], "unrestrict": 2, "up": [1, 2, 6, 7, 11, 12, 13, 14, 15, 17], "updat": [6, 8, 9, 14, 15, 16], "upgrad": [1, 4], "upload": [2, 7, 8, 9, 12, 16], "upstream": 5, "urandom": [8, 9, 16], "url": [1, 4, 9], "urm": [1, 4], "us": [0, 7, 8, 9, 12, 13, 14, 15, 16], "usag": [2, 7], "user": [0, 5, 7, 8, 9, 13, 15], "usernam": [14, 16], "usr": [8, 9, 13, 14, 16], "uv": [1, 4, 8, 14, 16], "v": [7, 8, 12, 13, 16], "v1": [5, 6], "valid": [9, 14], "valu": [5, 7, 8, 9, 15], "var": [8, 16], "variabl": [4, 14, 15, 16], "venv": [1, 8, 16], "verifi": 14, "version": [2, 5, 7, 13, 14, 16], "via": 8, "view": [7, 13], "violat": 9, "virtual": 1, "visualstudio": [8, 16], "vo": [8, 16], "vsasset": [8, 16], "vscode": [8, 9, 16], "wa": [5, 7], "wai": [6, 15, 16], "wait": [14, 16], "walk": [12, 17], "walkthrough": 14, "want": [5, 11, 12, 13, 15, 16], "warn": 12, "well": 16, "went": 13, "wget": [8, 16], "what": [2, 9, 12, 13, 14, 15, 16], "when": [2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15], "whenev": 14, "where": [2, 9, 16], "whether": 9, "which": [0, 7, 9, 14], "while": [2, 16], "whose": 11, "wildcard": 9, "window": 12, "within": 12, "without": [2, 5, 6, 7, 8, 9, 12, 13, 14, 15, 16], "work": [1, 5, 8, 9, 12, 13, 16], "workdir": 8, "workflow": [11, 12, 13, 14, 16, 17], "workstat": 0, "would": 9, "write": [1, 2, 8, 9, 11, 12, 13, 14, 15, 17], "wrong": 13, "yaml": [2, 7, 8, 9, 11, 12, 14, 15, 16], "ye": [1, 8, 9], "you": [1, 5, 7, 8, 11, 12, 13, 14, 15, 16], "your": [0, 2, 4, 5, 7, 11, 13, 14, 15, 16], "yourself": 15, "zero": 1, "zsh": 7, "zshrc": 7}, "titles": ["How OpenShell Works", "Quickstart", "Overview of NVIDIA OpenShell", "Release Notes", "NVIDIA OpenShell", "Configure Inference Routing", "About Inference Routing", "CLI Reference", "Default Policy Reference", "Policy Schema Reference", "License", "Community Sandboxes", "Create and Manage Sandboxes", "About Sandboxes", "Customize Sandbox Policies", "Providers", "Set Up a Sandbox with GitHub Repo Access", "Tutorials"], "titleterms": {"0": 3, "1": [3, 5, 16], "2": [5, 16], "3": [5, 16], "4": [5, 16], "5": 16, "It": 5, "With": 15, "about": [6, 13], "access": [9, 13, 16], "activ": 5, "agent": 8, "api": 6, "appli": 14, "ar": 11, "attach": 15, "auto": 15, "bare": 15, "binari": 9, "block": 8, "built": [7, 13], "case": 2, "catalog": 11, "cli": [1, 7], "command": 7, "common": 2, "commun": [11, 12], "compat": 8, "complet": 7, "compon": 0, "config": 5, "configur": 5, "connect": 12, "contribut": 11, "control": 2, "creat": [1, 5, 7, 12, 15, 16], "credenti": 15, "current": 11, "custom": [12, 14], "debug": 14, "default": [8, 13], "delet": 12, "deni": 14, "deploy": 0, "discoveri": 15, "endpoint": [5, 9], "entri": 9, "environ": 7, "exampl": [9, 14], "exist": 2, "explicit": 15, "explor": 4, "file": 12, "filesystem": 9, "first": 1, "flag": 7, "flow": 0, "form": 15, "forward": 7, "from": [5, 12, 15], "full": 9, "gatewai": 7, "get": [4, 7], "github": 16, "glanc": 2, "help": 7, "how": [0, 6], "imag": 12, "infer": [5, 6, 7], "inspect": 12, "instal": 1, "interact": 12, "iter": [14, 16], "kei": 15, "landlock": 9, "layer": 2, "level": 9, "licens": 10, "lifecycl": 13, "list": 12, "local": [6, 15], "log": [7, 12], "manag": [12, 15], "mode": 0, "monitor": 12, "nemoclaw": 7, "network": [9, 13], "next": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "note": 3, "nvidia": [2, 4], "object": 9, "openshel": [0, 1, 2, 4], "other": 11, "overview": 2, "part": 5, "pattern": 6, "polici": [7, 8, 9, 13, 14, 16], "port": 7, "prerequisit": [1, 16], "process": 9, "protect": 2, "provid": [5, 7, 15, 16], "quick": 14, "quickstart": 1, "refer": [7, 8, 9], "releas": 3, "repo": 16, "request": [0, 14], "risk": 2, "rout": [5, 6], "rule": [9, 13], "run": 14, "sandbox": [1, 5, 7, 11, 12, 13, 14, 15, 16], "schema": 9, "set": [5, 7, 16], "shell": 7, "shortcut": 15, "sourc": 11, "ssh": 12, "start": [4, 14], "statu": 7, "step": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "structur": [9, 13], "support": [6, 15], "termin": 7, "top": 9, "transfer": 12, "tree": 7, "tutori": 17, "type": 15, "up": 16, "updat": [5, 7], "us": [2, 5, 11], "variabl": 7, "verifi": [5, 16], "version": 9, "view": 12, "what": 11, "why": 2, "work": [0, 6], "write": 16, "your": [1, 12]}})
\ No newline at end of file
+Search.setIndex({"alltitles": {"0.1.0": [[3, "id1"]], "About Inference Routing": [[6, null]], "About Sandboxes": [[13, null]], "Access Levels": [[9, "access-levels"]], "Agent Compatibility": [[8, "agent-compatibility"]], "Already have a sandbox running?": [[16, null]], "Attach Providers to Sandboxes": [[15, "attach-providers-to-sandboxes"]], "Auto-Discovery Shortcut": [[15, "auto-discovery-shortcut"]], "Bare Key Form": [[15, "bare-key-form"]], "Binary Object": [[9, "binary-object"]], "Built-in Default Policy": [[13, "built-in-default-policy"]], "Built-in Help": [[7, "built-in-help"]], "CLI Reference": [[7, null]], "Command Tree": [[7, "command-tree"]], "Common Risks and Controls": [[2, "common-risks-and-controls"]], "Common Use Cases": [[2, "common-use-cases"]], "Community Sandboxes": [[11, null]], "Components": [[0, "components"]], "Configure Inference Routing": [[5, null]], "Connect to a Gateway": [[1, "connect-to-a-gateway"]], "Connect to a Sandbox": [[12, "connect-to-a-sandbox"]], "Contribute a Community Sandbox": [[11, "contribute-a-community-sandbox"]], "Create Your First OpenShell Sandbox": [[1, "create-your-first-openshell-sandbox"]], "Create a Provider": [[15, "create-a-provider"]], "Create a Sandbox": [[12, "create-a-sandbox"]], "Create and Manage Sandboxes": [[12, null]], "Create from a Community Sandbox or Custom Image": [[12, "create-from-a-community-sandbox-or-custom-image"]], "Current Catalog": [[11, "current-catalog"]], "Customize Sandbox Policies": [[14, null]], "Debug Denied Requests": [[14, "debug-denied-requests"]], "Default Policy Blocks": [[8, "default-policy-blocks"]], "Default Policy Reference": [[8, null]], "Delete Sandboxes": [[12, "delete-sandboxes"]], "Deployment Modes": [[0, "deployment-modes"]], "Endpoint Object": [[9, "endpoint-object"]], "Environment Variables": [[7, "environment-variables"]], "Examples": [[14, "examples"]], "Explore": [[4, "explore"]], "Filesystem Policy": [[9, "filesystem-policy"]], "From Local Credentials": [[15, "from-local-credentials"]], "Full Example": [[9, "full-example"]], "Gateway Commands": [[7, "gateway-commands"]], "Get Started": [[4, "get-started"]], "How OpenShell Works": [[0, null]], "How a Request Flows": [[0, "how-a-request-flows"]], "How inference.local Works": [[6, "how-inference-local-works"]], "Inference Commands": [[7, "inference-commands"]], "Install the OpenShell CLI": [[1, "install-the-openshell-cli"]], "Interactive SSH": [[12, "interactive-ssh"]], "Iterate on a Running Sandbox": [[14, "iterate-on-a-running-sandbox"]], "Landlock": [[9, "landlock"]], "License": [[10, null]], "List and Inspect Sandboxes": [[12, "list-and-inspect-sandboxes"]], "Manage Providers": [[15, "manage-providers"]], "Monitor your Sandbox": [[12, "monitor-your-sandbox"]], "NVIDIA OpenShell": [[4, null]], "Network Access Rules": [[13, "network-access-rules"]], "Network Policies": [[9, "network-policies"]], "Network Policy Entry": [[9, "network-policy-entry"]], "Next Steps": [[0, "next-steps"], [1, "next-steps"], [2, "next-steps"], [5, "next-steps"], [6, "next-steps"], [11, "next-steps"], [12, "next-steps"], [13, "next-steps"], [14, "next-steps"], [15, "next-steps"], [16, "next-steps"]], "Other Sources": [[11, "other-sources"]], "Overview of NVIDIA OpenShell": [[2, null]], "Policy Commands": [[7, "policy-commands"]], "Policy Schema Reference": [[9, null]], "Policy Structure": [[13, "policy-structure"]], "Port Forwarding Commands": [[7, "port-forwarding-commands"]], "Prerequisites": [[1, "prerequisites"], [16, "prerequisites"]], "Process": [[9, "process"]], "Protection Layers at a Glance": [[2, "protection-layers-at-a-glance"]], "Provider Commands": [[7, "provider-commands"]], "Provider Create Flags": [[7, "provider-create-flags"]], "Providers": [[15, null]], "Quick Start: Apply a Custom Policy": [[14, "quick-start-apply-a-custom-policy"]], "Quickstart": [[1, null]], "Release Notes": [[3, null]], "Rule Object": [[9, "rule-object"]], "Sandbox Commands": [[7, "sandbox-commands"]], "Sandbox Create Flags": [[7, "sandbox-create-flags"]], "Sandbox Lifecycle": [[13, "sandbox-lifecycle"]], "Set Up a Sandbox with GitHub Repo Access": [[16, null]], "Shell Completions": [[7, "shell-completions"]], "Status, Logs, and Terminal": [[7, "status-logs-and-terminal"]], "Step 1: Create a GitHub Provider": [[16, "step-1-create-a-github-provider"]], "Step 1: Create a Provider": [[5, "step-1-create-a-provider"]], "Step 2: Set Inference Routing": [[5, "step-2-set-inference-routing"]], "Step 2: Write the Policy": [[16, "step-2-write-the-policy"]], "Step 3: Create the Sandbox": [[16, "step-3-create-the-sandbox"]], "Step 3: Verify the Active Config": [[5, "step-3-verify-the-active-config"]], "Step 4: Update Part of the Config": [[5, "step-4-update-part-of-the-config"]], "Step 4: Verify Access": [[16, "step-4-verify-access"]], "Step 5: Iterate on the Policy": [[16, "step-5-iterate-on-the-policy"]], "Supported API Patterns": [[6, "supported-api-patterns"]], "Supported Provider Types": [[15, "supported-provider-types"]], "Top-Level Structure": [[9, "top-level-structure"]], "Transfer Files": [[12, "transfer-files"]], "Tutorials": [[17, null]], "Use It from a Sandbox": [[5, "use-it-from-a-sandbox"]], "Use a Community Sandbox": [[11, "use-a-community-sandbox"]], "Verify the Endpoint from a Sandbox": [[5, "verify-the-endpoint-from-a-sandbox"]], "Version": [[9, "version"]], "View Logs": [[12, "view-logs"]], "What Are Community Sandboxes": [[11, "what-are-community-sandboxes"]], "Why OpenShell Exists": [[2, "why-openshell-exists"]], "With Explicit Credentials": [[15, "with-explicit-credentials"]], "nemoclaw inference get": [[7, "nemoclaw-inference-get"]], "nemoclaw inference set": [[7, "nemoclaw-inference-set"]], "nemoclaw inference update": [[7, "nemoclaw-inference-update"]]}, "docnames": ["about/architecture", "about/get-started", "about/overview", "about/release-notes", "index", "inference/configure", "inference/index", "reference/cli", "reference/default-policy", "reference/policy-schema", "resources/eula", "sandboxes/community-sandboxes", "sandboxes/create-and-manage", "sandboxes/index", "sandboxes/policies", "sandboxes/providers", "tutorials/github-sandbox", "tutorials/index"], "envversion": {"sphinx": 62, "sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx.ext.viewcode": 1}, "filenames": ["about/architecture.md", "about/get-started.md", "about/overview.md", "about/release-notes.md", "index.md", "inference/configure.md", "inference/index.md", "reference/cli.md", "reference/default-policy.md", "reference/policy-schema.md", "resources/eula.md", "sandboxes/community-sandboxes.md", "sandboxes/create-and-manage.md", "sandboxes/index.md", "sandboxes/policies.md", "sandboxes/providers.md", "tutorials/github-sandbox.md", "tutorials/index.md"], "indexentries": {}, "objects": {}, "objnames": {}, "objtypes": {}, "terms": {"": [6, 7, 8, 9, 11, 13, 15, 16], "0": [9, 14], "1": [9, 13, 14], "10": 5, "12": 1, "124": 14, "15": 5, "168": 5, "192": 5, "2": 14, "256": 9, "3": 1, "30b": 5, "4": 14, "4096": 9, "443": [8, 9, 13, 14, 16], "5m": 12, "61": 12, "A": [5, 6, 8, 9, 12, 13, 16], "And": 16, "At": 11, "By": 16, "For": [0, 2, 3, 9, 12, 13, 14, 16], "If": [1, 6, 8, 11, 12, 13, 14, 15, 16], "It": [2, 3, 4, 6, 8, 13], "No": [1, 6, 9, 13], "One": [6, 9], "Or": 5, "That": 2, "The": [0, 1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "Then": [14, 16], "To": [5, 11, 14, 16], "With": 2, "a3b": 5, "abc123": 15, "abi": [8, 9, 13], "about": [4, 5, 7, 12, 14], "abov": [14, 15], "absolut": 9, "accept": [7, 11], "access": [1, 2, 4, 5, 6, 7, 8, 12, 14, 15, 17], "across": [0, 2, 16], "act": 0, "action": [8, 12, 14, 16], "activ": [1, 4, 7, 9, 12, 13, 15], "ad": [14, 15], "add": [1, 7, 8, 9, 11, 12, 14, 16], "addit": [1, 15, 16], "address": 9, "adjust": 14, "after": [1, 7, 12, 14, 16], "ag": 12, "again": 12, "against": [0, 11, 12, 13, 14], "agent": [0, 1, 2, 3, 4, 7, 9, 11, 12, 13, 15, 16], "ai": [2, 3, 4, 8, 13, 15], "aliv": 7, "all": [0, 1, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "allow": [0, 2, 6, 8, 9, 13, 14, 16], "allowed_rout": [13, 14], "allowlist": 14, "alon": 9, "along": 16, "alpha": [14, 16], "alreadi": 15, "also": [0, 11, 12], "altern": 14, "an": [0, 1, 2, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "ani": [5, 6, 7, 9, 11, 15, 16], "anoth": [12, 16, 17], "anthrop": [5, 6, 8, 15, 16], "anthropic_api_kei": [1, 5, 15, 16], "anyth": [5, 11], "api": [0, 1, 2, 4, 5, 8, 9, 11, 12, 13, 14, 15, 16], "api_kei": [5, 15], "app": [8, 16], "append": 7, "appli": [2, 6, 7, 8, 11, 13], "applic": [0, 5], "approv": 2, "ar": [2, 5, 6, 7, 8, 9, 12, 13, 15, 16], "architectur": [0, 2, 4], "argument": 7, "artifactori": [1, 4], "ask": 16, "assign": 7, "assist": 5, "associ": 9, "attach": [7, 12], "attempt": 2, "audit": [2, 9], "auth": 0, "authent": 5, "auto": 7, "automat": [0, 1, 9], "autonom": [2, 4], "avail": [7, 11], "avoid": 14, "awar": 0, "back": [7, 9, 11], "backend": [0, 2, 4, 5, 6, 7], "background": [7, 12, 16], "bare": 7, "base": [0, 11], "base_url": 5, "bash": [7, 8, 16], "befor": [0, 1, 5, 7, 9, 12, 13, 14, 16], "begin": [1, 16], "behav": 16, "behavior": [2, 9], "behind": 6, "being": 13, "belong": 5, "below": [2, 7, 9, 16], "best_effort": [8, 9, 13, 16], "between": 12, "bin": [1, 8, 9, 13, 14, 16], "binari": [0, 8, 13, 14, 16], "blank": 16, "block": [0, 2, 9, 12, 13, 14, 16], "bool": 9, "both": [0, 7, 8, 13, 16], "boundari": 0, "box": [8, 13], "bravo": [14, 16], "breakdown": [13, 14], "brev": 1, "bring": 2, "broad": 9, "broker": 0, "brows": [12, 13, 15, 16], "build": [7, 8, 11, 12], "built": [1, 2, 11, 12, 15], "bundl": [1, 11, 12], "call": [0, 2, 4, 5, 6, 7, 8, 13, 14, 15, 16], "can": [0, 1, 2, 5, 8, 9, 11, 12, 13, 14, 15, 16], "cannot": [15, 16], "capabl": [2, 4], "case": 0, "catalog": [1, 5, 8, 12, 13, 15], "categori": 9, "caus": 12, "chang": [0, 5, 6, 9, 14, 16], "charact": 9, "chat": [5, 6], "check": [0, 12, 13, 14], "choos": [1, 5], "ci_job_token": 15, "class": 15, "claud": [1, 2, 4, 7, 8, 9, 12, 14, 15, 16], "claude_api_kei": 15, "claude_cod": 16, "cli": [0, 2, 4, 5, 11, 12, 14, 15, 16], "client": 5, "clone": [0, 8, 16], "cloud": 2, "cluster": [0, 7, 12, 15], "code": [0, 1, 2, 5, 6, 7, 8, 11, 12, 14, 15, 16], "codex": [7, 8, 15], "com": [1, 4, 6, 8, 9, 11, 12, 13, 14, 16], "combin": [2, 9, 12, 14], "come": 6, "command": [0, 1, 4, 5, 11, 12, 14, 15], "comment": 16, "commit": 16, "common": [8, 13], "commun": [1, 2, 4, 7, 13, 15], "compat": [5, 6, 9, 13, 16], "complet": [5, 6, 8, 9, 12, 13, 15, 16, 17], "complianc": 2, "compon": [2, 9], "comput": 0, "concept": 4, "config": 7, "configur": [0, 1, 4, 6, 7, 8, 9, 11, 13], "confin": 2, "confirm": [5, 14, 16], "connect": [0, 2, 5, 7, 8, 9, 13, 16], "consid": 11, "consist": 5, "constrain": 2, "constraint": [0, 9], "contain": [0, 1, 7, 8, 9, 11, 12, 16], "container": 2, "content": 5, "context": [0, 2], "continu": 1, "contribut": 12, "control": [0, 5, 6, 9, 11, 12, 13, 14, 15, 16], "coordin": 0, "cost": 0, "cover": [3, 5, 13], "coverag": 8, "creat": [0, 2, 4, 8, 11, 13, 14, 17], "creation": [2, 7, 9, 12, 13, 14, 16], "credenti": [0, 1, 2, 3, 4, 5, 6, 7, 11, 12, 13, 14, 16], "curl": [5, 8, 13, 16], "current": [5, 7, 9, 14, 15, 16], "custom": [1, 2, 4, 8, 11, 13, 15, 16], "d": [5, 7], "danger": [2, 13], "dashboard": [7, 8, 12, 14], "data": [2, 4, 7, 11, 13], "decis": [0, 7, 12], "declar": [2, 4, 8, 9], "decrypt": [0, 9, 14], "default": [2, 7, 9, 11, 14, 16], "defens": [0, 2], "defin": [6, 8, 9, 11, 13, 15], "definit": [0, 1, 11, 14], "delet": [7, 13, 15, 16], "deni": [0, 2, 6, 8, 12, 13, 16], "denial": 14, "depend": [6, 16], "deploi": [0, 1, 7, 8], "deploy": 7, "depth": [0, 2], "describ": [11, 14], "descript": [5, 7, 9, 11, 13], "design": [2, 11], "desktop": 1, "destin": [0, 2, 8, 9, 13, 14], "destroi": [7, 9], "detail": [2, 3, 4, 5, 6, 7, 12, 13], "detect": 15, "dev": [8, 9, 11, 12, 16], "develop": [2, 8], "diagnos": 12, "differ": [9, 16], "dir": [11, 12], "directli": [0, 5, 6, 11, 15], "directori": [7, 9, 11, 12], "disabl": 8, "disallow": 9, "discov": [7, 15], "discoveri": 6, "disk": [9, 11, 13], "displai": 9, "distinct": 16, "do": [6, 15, 16], "docker": [0, 1, 8, 12, 16], "dockerfil": [7, 11, 12], "document": [7, 9], "doe": [5, 15], "domain": 2, "don": 12, "down": [0, 13], "download": [7, 8, 12, 16], "dummi": 5, "dure": 13, "dynam": [9, 13, 16], "e": [13, 16], "each": [0, 1, 3, 7, 8, 9, 11, 13, 14, 15, 16], "edit": [14, 16], "effect": 9, "egress": 0, "either": 9, "elev": 13, "els": 11, "empti": 5, "enabl": [0, 8, 9, 14], "encrypt": 9, "end": [4, 5, 11, 12, 14, 16], "endpoint": [0, 2, 6, 8, 13, 14, 16], "enforc": [0, 1, 2, 3, 9, 13, 14, 16], "engin": [0, 13], "enterpris": 2, "entiti": 15, "entri": [7, 8, 12, 13, 14, 16], "entrypoint": 11, "env": 7, "environ": [1, 2, 4, 5, 11, 12, 13, 14, 15, 16], "error": [8, 12, 13, 16], "escal": 2, "escap": 9, "especi": 12, "etc": [0, 8, 9, 13, 16], "evalu": 6, "event": 12, "everi": [0, 5, 6, 7, 9, 13, 14, 15], "everyth": [7, 16], "ex": 8, "exactli": [4, 16], "exampl": [7, 11, 12, 13, 16], "exce": 9, "exclus": 9, "execut": [2, 3, 4, 7, 8, 9, 13], "exercis": 16, "exfiltr": [2, 4, 13], "exist": [5, 7, 11, 12, 15, 16], "exit": [7, 12, 14, 16], "explain": 12, "explicit": 2, "explicitli": [7, 9, 14], "export": [14, 16], "expos": 6, "exposur": 13, "express": 16, "extend": 16, "extens": 8, "extern": [0, 2, 5, 6, 15], "f": 7, "fail": [9, 14, 16], "failur": 2, "fall": [7, 9], "fastest": 15, "featur": [8, 16], "fetch": [8, 16], "field": [5, 7, 9, 13, 14, 15], "file": [2, 4, 7, 8, 11, 13, 14, 16], "filesystem": [0, 2, 8, 13], "filesystem_polici": [9, 13, 16], "filter": [7, 12, 13], "find": 15, "fine": 9, "finer": 16, "finish": 17, "first": [0, 2, 3, 4, 13, 14, 15, 16], "fish": 7, "fix": 14, "flag": [1, 8, 11, 12, 14, 15, 16], "flow": 5, "follow": [1, 7, 8, 11, 12, 14, 15, 16], "forc": 7, "fork": 11, "format": 7, "forward": [0, 5, 6, 9, 12], "foundat": 11, "four": [0, 2], "from": [0, 1, 4, 6, 7, 11, 13, 14, 16, 17], "full": [1, 7, 8, 12, 13, 14, 16], "fulli": 12, "g": [13, 16], "gallerycdn": [8, 16], "gatewai": [0, 5, 6, 12], "gener": [5, 6, 7, 11, 15], "get": [1, 5, 6, 8, 9, 12, 14, 15, 16], "gh": [8, 9, 14, 15, 16], "gh_token": [15, 16], "gid": 9, "git": [0, 8, 9, 16], "github": [1, 3, 4, 7, 8, 9, 12, 14, 15, 17], "github_api": 16, "github_git": 16, "github_repo": 14, "github_rest_api": 9, "github_token": [15, 16], "githubusercont": [8, 16], "gitlab": [7, 15], "gitlab_token": 15, "give": 2, "glab": 15, "glab_token": 15, "glob": 9, "go": [2, 5], "goe": 13, "govern": 4, "grain": 9, "grant": [8, 16], "granular": 14, "graphql": [14, 16], "group": [8, 9, 13], "grow": 11, "guid": [1, 4, 17], "guidelin": 11, "h": 5, "ha": 13, "handl": [6, 9], "happen": 12, "hard_requir": 9, "hash": 14, "have": [1, 11, 12], "head": [9, 14, 16], "header": 14, "health": 7, "healthi": 1, "hello": 5, "help": 5, "here": [1, 7], "highest": [8, 9, 13], "highlight": 3, "hint": [7, 13], "hold": 5, "host": [0, 2, 4, 5, 6, 7, 8, 9, 12, 13, 14, 16], "hostnam": 9, "hot": [2, 6, 9, 13, 14, 16], "how": [1, 2, 5, 9, 11, 12, 13, 16], "http": [0, 1, 4, 5, 6, 7, 8, 9, 13, 14, 16], "human": 7, "i": [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16], "id": [5, 7], "ident": [0, 2, 9], "identifi": [0, 7, 8, 9], "ignor": 5, "imag": [1, 2, 4, 7, 11], "import": 5, "inaccess": 9, "includ": [0, 7, 8, 13], "include_workdir": [9, 16], "index": [1, 4], "individu": [9, 12], "infer": [0, 2, 4, 8, 12, 13, 14, 16], "info": [7, 8, 9, 16], "inform": [7, 12], "infrastructur": [0, 4], "initi": 14, "inject": [0, 6, 7, 12, 13, 15, 16], "input": 5, "insid": [0, 1, 5, 6, 7, 8, 9, 16], "inspect": [7, 9, 13, 14, 15], "inspect_for_infer": 12, "instal": [0, 2, 4, 8, 14, 16], "instanc": 1, "instead": 5, "instruct": 5, "integ": 9, "integr": [8, 15, 16], "intend": 9, "interact": [7, 16], "intercept": [0, 5, 12], "intern": 2, "introduc": 3, "invalid_argu": 9, "invok": 11, "io": [8, 16], "ip": 9, "isn": 12, "isol": [0, 2, 3, 7, 13], "issu": [8, 14, 16], "iter": 12, "its": [4, 7, 8, 9], "j": 7, "json": 5, "k": 7, "k3": 0, "keep": [0, 2, 4, 7, 12, 14, 16], "kei": [2, 6, 7, 9, 11, 12, 13, 16], "kernel": [0, 2, 3, 8, 9, 13], "known": 15, "kubectl": 7, "kubernet": 0, "l4": 8, "label": 12, "landlock": [2, 8, 13, 16], "last": 7, "later": [1, 12], "latest": [11, 12], "launch": [1, 7, 11, 15], "launchabl": 1, "layer": [0, 13], "learn": [0, 1, 2, 4], "let": [15, 16], "level": [2, 3, 7, 12, 13, 14, 16], "lib": [8, 9, 13, 16], "librari": 16, "lifecycl": [0, 1, 12], "like": [6, 9, 12], "line": 16, "list": [7, 8, 9, 13, 14, 15], "live": [7, 12, 14], "llm": [0, 8], "load": [9, 14], "local": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 14, 16], "locat": 0, "lock": [2, 9, 13, 16], "log": [0, 8, 9, 13, 14, 16], "logic": 9, "longer": 12, "look": [12, 14, 15, 16], "lookup": 8, "lsm": [9, 13], "machin": [1, 12], "mai": [9, 13], "make": [1, 2, 16], "manag": [0, 1, 3, 4, 5, 6, 7, 11, 13, 16], "mandatori": 9, "manipul": 11, "map": 9, "marketplac": [8, 16], "match": [0, 1, 6, 8, 9, 13, 16], "materi": 2, "md": 11, "messag": [5, 6], "metadata": [7, 8, 14], "method": [0, 6, 9, 13, 14, 16], "microsoft": [8, 15, 16], "might": [12, 16], "minimum": 11, "miss": 14, "mitig": 2, "mode": [2, 7, 9], "model": [0, 2, 5, 6, 7, 15], "modifi": [9, 14, 16], "monitor": [7, 14], "more": [3, 4, 7, 15, 16], "most": 2, "move": 13, "msecnd": [8, 16], "multipl": [7, 13, 16], "must": [8, 9, 11, 12, 13], "mutat": 8, "mutual": 9, "my": [5, 11, 12, 13, 14, 15, 16], "my_api": 13, "name": [5, 7, 9, 11, 12, 13, 14, 15, 16], "namespac": 13, "nano": 5, "navig": 7, "need": [1, 4, 5, 6, 11, 12, 13, 14, 15, 16], "neither": 9, "nemoclaw": [0, 1, 3, 4, 5, 9, 11, 12, 13, 15, 16], "nemoclaw_clust": 7, "nemoclaw_sandbox_polici": 7, "nemotron": 5, "net": [8, 16], "network": [0, 2, 4, 5, 6, 8, 12, 14, 16], "network_polici": [5, 6, 9, 13, 14, 16], "new": [7, 14, 16], "node": [8, 9, 16], "non": 8, "none": [8, 15], "nor": 9, "normal": 9, "note": 8, "noth": 4, "now": 1, "npm": 9, "npm_registri": 9, "npmj": 9, "null": [8, 9, 16], "number": 9, "nv": [1, 4], "nvidia": [1, 3, 5, 6, 7, 8, 13, 15, 16], "nvidia_api_kei": [5, 15], "nvidia_infer": 16, "o": [9, 12], "object": [8, 16], "often": 16, "omit": [7, 9], "onc": [1, 5, 16], "one": [0, 5, 6, 7, 11, 12, 15, 16, 17], "ones": 12, "onli": [0, 2, 5, 6, 7, 8, 9, 13, 14, 16, 17], "open": [0, 2, 7, 11, 12, 13], "openai": [5, 6, 8, 15], "openai_api_kei": [5, 15], "openai_base_url": 5, "openclaw": [1, 2, 4, 11, 12], "opencod": [2, 7, 8, 15, 16], "opencode_api_kei": 15, "openrouter_api_kei": 15, "openshel": [3, 5, 6, 7, 8, 9, 11, 13, 14, 15, 16], "openshell_sandbox_polici": 14, "oper": [7, 16], "option": [1, 7, 9, 11, 13, 14, 16], "org": [8, 9, 14, 16], "org_nam": 14, "organ": 16, "origin": [0, 6], "other": [2, 6, 8, 16], "otherwis": 13, "out": [8, 13], "outbound": [0, 2, 6, 8, 12, 13], "outlin": 14, "outlook": [7, 15], "output": [7, 9, 12], "outsid": [2, 16], "over": [2, 8], "overli": 9, "overrid": 7, "overview": 4, "own": [1, 2, 11, 12], "pack": [8, 9, 16], "packag": [0, 1, 2, 8, 11, 12, 16], "page": [1, 3, 5, 12, 14], "pair": [8, 13], "partial": 8, "particular": 11, "pass": [0, 7, 11, 14, 15], "passthrough": [8, 9, 14], "pat": 16, "patch": [9, 14], "path": [0, 2, 6, 7, 8, 9, 11, 13, 14, 16], "pattern": [5, 9], "payload": [13, 14], "per": [0, 9, 14], "perman": 7, "permiss": [4, 9], "permit": 9, "persist": 16, "person": 16, "phase": [12, 13], "pick": [1, 6], "pid": 8, "pip": [1, 4, 8, 14, 16], "pipe": 7, "plan": 14, "plane": 0, "platform": [0, 8, 16], "pod": 0, "point": [5, 11, 12], "polici": [0, 1, 2, 3, 4, 11, 12, 15, 17], "port": [0, 8, 9, 12, 13, 14, 16], "post": [6, 8, 9, 14, 16], "pr": [8, 16], "pre": [1, 4, 8, 11, 12, 13, 15], "preconfigur": 11, "preserv": [2, 7], "press": 7, "prevent": [2, 4, 13], "print": 7, "privaci": [0, 2, 5, 6, 13], "privat": [2, 4, 13], "privileg": [2, 13], "proc": [8, 9, 16], "process": [0, 2, 8, 11, 12, 13, 16], "prod": 5, "prompt": [1, 2], "properti": 6, "protect": [0, 4, 13], "protocol": [9, 13, 14, 16], "provid": [1, 2, 4, 6, 8, 9, 11, 12, 13, 14, 17], "provis": [0, 13], "proxi": [0, 8, 9, 12, 13, 14, 16], "prss": [8, 16], "publish": 11, "pull": [1, 8, 11, 12, 14, 16], "purg": [12, 13], "purpos": [11, 12], "push": [8, 14, 16], "put": 9, "pypi": [1, 4, 8, 14, 16], "python": [1, 8, 16], "python3": [8, 16], "pythonhost": [8, 14, 16], "q": 7, "queri": [0, 13], "quickstart": [0, 2, 4, 16], "quit": 7, "rather": 6, "raw": [8, 16], "reach": [5, 8, 9, 13, 14], "reachabl": [5, 9], "read": [2, 5, 7, 8, 9, 13, 14, 15, 16, 17], "read_onli": [9, 13, 16], "read_writ": [9, 13, 16], "readabl": 7, "readi": [6, 11, 13], "readm": [11, 16], "real": 12, "reason": [5, 14], "receiv": [8, 15, 16], "recogn": 15, "reconnect": [12, 16], "record": [5, 6, 7], "recreat": [6, 9, 15, 16], "ref": [8, 9, 16], "refer": [2, 3, 4, 5, 11, 12, 13, 14, 15, 16], "refresh": 6, "refus": 12, "regist": 7, "registri": [9, 11, 12], "reject": 9, "releas": [8, 12, 13], "relev": 9, "reload": [2, 9, 13, 14, 16], "remain": 16, "remot": [0, 1, 7, 8, 12, 16], "remov": [7, 12], "repeat": [5, 7, 14], "replac": [7, 14, 16], "repo": [1, 4, 12, 14, 15, 17], "report": [8, 16], "repositori": [8, 11, 16], "request": [5, 6, 7, 8, 9, 11, 13], "requir": [5, 7, 8, 9, 15], "rerout": [2, 13], "resolv": [8, 11, 12], "resourc": [12, 13], "respons": [5, 6], "rest": [0, 8, 9, 13, 14, 16], "restart": 9, "restrict": [2, 9, 13], "retriev": 12, "return": [0, 12], "reus": 14, "reusabl": 2, "review": [2, 11], "revis": 14, "rewrit": 5, "role": [0, 5], "root": 9, "rout": [0, 2, 4, 8, 13], "router": [0, 5, 6], "rule": [0, 1, 5, 6, 8, 11, 14, 16], "run": [0, 1, 2, 4, 5, 7, 8, 9, 11, 12, 13, 15], "run_as_group": [9, 13, 16], "run_as_us": [9, 13, 16], "runtim": [0, 2, 4, 7, 12, 13, 15, 16], "safe": [4, 13], "same": [0, 2, 5, 6, 8, 13, 16], "sandbox": [0, 2, 3, 4, 6, 8, 9, 17], "save": 5, "scenario": 16, "schema": [4, 13, 14, 15, 16], "scope": [1, 5, 9, 16, 17], "script": [7, 11], "sdg": 11, "seccomp": [2, 13], "second": 16, "secret": [2, 7], "section": [8, 13, 14], "secur": [0, 2, 5, 6], "see": [1, 5, 6, 7, 13, 14, 15, 16], "select": 7, "self": [2, 4, 5], "send": 2, "sensit": [0, 2], "sentri": [8, 16], "separ": 15, "serv": 5, "server": [5, 8, 9, 16], "servic": [0, 15], "session": [7, 8, 12], "set": [1, 6, 8, 9, 11, 12, 13, 14, 15, 17], "setuid": [2, 13], "setup": 1, "sever": 12, "share": [1, 4, 16], "shell": [15, 16], "ship": 13, "should": [5, 6, 16], "show": [1, 7, 8, 12, 14, 16], "simpl": [1, 4, 14], "simul": 11, "sinc": 12, "singl": [1, 7, 11, 12], "sk": 15, "skill": [1, 11], "skip": [1, 16], "smart": [8, 16], "so": [2, 8, 11, 15, 16], "socket": 8, "someth": 13, "sourc": [1, 2, 7, 12, 14, 16], "special": 6, "specif": 12, "specifi": [7, 12, 15], "split": 13, "spot": 12, "src": 12, "ssh": [0, 2, 7], "stai": [5, 6], "standalon": 8, "standard": 16, "start": [0, 7, 9, 12, 13, 16, 17], "startup": [7, 11], "state": [0, 7], "static": [9, 13, 16], "statsig": [8, 16], "statu": [1, 12, 14], "step": 17, "stop": [7, 12], "storag": 9, "store": [15, 16], "stream": [7, 12, 13, 14], "string": 9, "strip": [0, 6, 14], "structur": 14, "subcommand": 7, "subdomain": 9, "submiss": 11, "subsequ": [1, 7], "success": 5, "successfulli": 16, "sudo": [2, 13], "summar": 2, "supervis": 0, "suppli": [5, 6, 11, 12, 13, 15], "support": [5, 8, 9, 11, 13, 16], "sure": [1, 16], "switch": 5, "sync": 13, "syntax": 9, "synthet": 11, "syscal": 2, "system": [4, 9, 11, 13], "t": 12, "tab": [1, 7], "tabl": [2, 8], "tail": [7, 12, 14, 16], "tailor": 1, "take": 9, "target": [1, 7], "tcp": [8, 9, 13, 14], "team": 2, "telemetri": 8, "term": [7, 12, 14], "termin": [0, 8, 9, 12, 13, 14, 16], "test": 16, "than": 6, "theft": 2, "thei": [2, 4, 12], "them": [2, 9, 13, 15, 16], "thi": [1, 2, 3, 5, 7, 9, 12, 13, 14, 15, 16], "thing": [13, 16], "those": 13, "threat": 2, "three": [0, 13], "through": [0, 5, 6, 8, 9, 12, 13, 17], "throughout": 16, "time": [7, 9, 12, 14], "timeout": 14, "titl": 16, "tl": [0, 8, 9, 13, 14, 16], "tmp": [8, 9, 13, 16], "togeth": 0, "token": [11, 12, 13, 15, 16], "tool": [11, 15], "torn": 13, "total": 9, "tradeoff": 2, "traffic": [0, 2, 4, 5, 6, 8, 9], "trail": [7, 12, 15], "transpar": 0, "travers": 9, "treat": [2, 6, 16], "tree": 9, "triag": 14, "true": [9, 16], "trust": 16, "try": [12, 16], "tunnel": [0, 7], "tutori": [1, 4, 12, 16], "two": [1, 4, 5, 6, 16], "type": [1, 5, 7, 9, 16], "typic": [9, 15], "uid": 9, "unapprov": 2, "unauthor": [2, 4, 13], "unavail": 9, "uncontrol": 4, "under": [2, 9, 11, 13, 16], "understand": 2, "unexpectedli": 12, "unix": 9, "unprivileg": [2, 13], "unrestrict": 2, "up": [1, 2, 6, 7, 11, 12, 13, 14, 15, 17], "updat": [6, 8, 9, 14, 15, 16], "upgrad": [1, 4], "upload": [2, 7, 8, 9, 12, 16], "upstream": 5, "urandom": [8, 9, 16], "url": [1, 4, 9], "urm": [1, 4], "us": [0, 7, 8, 9, 12, 13, 14, 15, 16], "usag": [2, 7], "user": [0, 5, 7, 8, 9, 13, 15], "usernam": [14, 16], "usr": [8, 9, 13, 14, 16], "uv": [1, 4, 8, 14, 16], "v": [7, 8, 12, 13, 16], "v1": [5, 6], "valid": [9, 14], "valu": [5, 7, 8, 9, 15], "var": [8, 16], "variabl": [4, 14, 15, 16], "venv": [1, 8, 16], "verifi": 14, "version": [2, 5, 7, 13, 14, 16], "via": 8, "view": [7, 13], "violat": 9, "virtual": 1, "visualstudio": [8, 16], "vo": [8, 16], "vsasset": [8, 16], "vscode": [8, 9, 16], "wa": [5, 7], "wai": [6, 15, 16], "wait": [14, 16], "walk": [12, 17], "walkthrough": 14, "want": [5, 11, 12, 13, 15, 16], "warn": 12, "well": 16, "went": 13, "wget": [8, 16], "what": [2, 9, 12, 13, 14, 15, 16], "when": [1, 2, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15], "whenev": 14, "where": [2, 9, 16], "whether": 9, "which": [0, 7, 9, 14], "while": [2, 16], "whose": 11, "wildcard": 9, "window": 12, "within": 12, "without": [2, 5, 6, 7, 8, 9, 12, 13, 14, 15, 16], "work": [1, 5, 8, 9, 12, 13, 16], "workdir": 8, "workflow": [11, 12, 13, 14, 16, 17], "workstat": 0, "would": 9, "write": [1, 2, 8, 9, 11, 12, 13, 14, 15, 17], "wrong": 13, "yaml": [2, 7, 8, 9, 11, 12, 14, 15, 16], "ye": [1, 8, 9], "you": [1, 5, 7, 8, 11, 12, 13, 14, 15, 16], "your": [0, 2, 4, 5, 7, 11, 13, 14, 15, 16], "yourself": 15, "zero": 1, "zsh": 7, "zshrc": 7}, "titles": ["How OpenShell Works", "Quickstart", "Overview of NVIDIA OpenShell", "Release Notes", "NVIDIA OpenShell", "Configure Inference Routing", "About Inference Routing", "CLI Reference", "Default Policy Reference", "Policy Schema Reference", "License", "Community Sandboxes", "Create and Manage Sandboxes", "About Sandboxes", "Customize Sandbox Policies", "Providers", "Set Up a Sandbox with GitHub Repo Access", "Tutorials"], "titleterms": {"0": 3, "1": [3, 5, 16], "2": [5, 16], "3": [5, 16], "4": [5, 16], "5": 16, "It": 5, "With": 15, "about": [6, 13], "access": [9, 13, 16], "activ": 5, "agent": 8, "alreadi": 16, "api": 6, "appli": 14, "ar": 11, "attach": 15, "auto": 15, "bare": 15, "binari": 9, "block": 8, "built": [7, 13], "case": 2, "catalog": 11, "cli": [1, 7], "command": 7, "common": 2, "commun": [11, 12], "compat": 8, "complet": 7, "compon": 0, "config": 5, "configur": 5, "connect": [1, 12], "contribut": 11, "control": 2, "creat": [1, 5, 7, 12, 15, 16], "credenti": 15, "current": 11, "custom": [12, 14], "debug": 14, "default": [8, 13], "delet": 12, "deni": 14, "deploy": 0, "discoveri": 15, "endpoint": [5, 9], "entri": 9, "environ": 7, "exampl": [9, 14], "exist": 2, "explicit": 15, "explor": 4, "file": 12, "filesystem": 9, "first": 1, "flag": 7, "flow": 0, "form": 15, "forward": 7, "from": [5, 12, 15], "full": 9, "gatewai": [1, 7], "get": [4, 7], "github": 16, "glanc": 2, "have": 16, "help": 7, "how": [0, 6], "imag": 12, "infer": [5, 6, 7], "inspect": 12, "instal": 1, "interact": 12, "iter": [14, 16], "kei": 15, "landlock": 9, "layer": 2, "level": 9, "licens": 10, "lifecycl": 13, "list": 12, "local": [6, 15], "log": [7, 12], "manag": [12, 15], "mode": 0, "monitor": 12, "nemoclaw": 7, "network": [9, 13], "next": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "note": 3, "nvidia": [2, 4], "object": 9, "openshel": [0, 1, 2, 4], "other": 11, "overview": 2, "part": 5, "pattern": 6, "polici": [7, 8, 9, 13, 14, 16], "port": 7, "prerequisit": [1, 16], "process": 9, "protect": 2, "provid": [5, 7, 15, 16], "quick": 14, "quickstart": 1, "refer": [7, 8, 9], "releas": 3, "repo": 16, "request": [0, 14], "risk": 2, "rout": [5, 6], "rule": [9, 13], "run": [14, 16], "sandbox": [1, 5, 7, 11, 12, 13, 14, 15, 16], "schema": 9, "set": [5, 7, 16], "shell": 7, "shortcut": 15, "sourc": 11, "ssh": 12, "start": [4, 14], "statu": 7, "step": [0, 1, 2, 5, 6, 11, 12, 13, 14, 15, 16], "structur": [9, 13], "support": [6, 15], "termin": 7, "top": 9, "transfer": 12, "tree": 7, "tutori": 17, "type": 15, "up": 16, "updat": [5, 7], "us": [2, 5, 11], "variabl": 7, "verifi": [5, 16], "version": 9, "view": 12, "what": 11, "why": 2, "work": [0, 6], "write": 16, "your": [1, 12]}})
\ No newline at end of file
diff --git a/pr-preview/pr-195/tutorials/github-sandbox.html b/pr-preview/pr-195/tutorials/github-sandbox.html
index 234833830..869245227 100644
--- a/pr-preview/pr-195/tutorials/github-sandbox.html
+++ b/pr-preview/pr-195/tutorials/github-sandbox.html
@@ -433,6 +433,14 @@
 </section>
 <section id="step-1-create-a-github-provider">
 <h2>Step 1: Create a GitHub Provider<a class="headerlink" href="#step-1-create-a-github-provider" title="Link to this heading">#</a></h2>
+<div class="tip admonition">
+<p class="admonition-title">Already have a sandbox running?</p>
+<p>If you followed the Quickstart and already have a sandbox without a GitHub provider, you have two options:</p>
+<ol class="arabic simple">
+<li><p><strong>Add a provider to a new sandbox</strong> — delete the existing sandbox, create the provider below, and recreate the sandbox with <code class="docutils literal notranslate"><span class="pre">--provider</span> <span class="pre">my-github</span></code> in Step 3.</p></li>
+<li><p><strong>Set the token inside the sandbox</strong> — connect with <code class="docutils literal notranslate"><span class="pre">nemoclaw</span> <span class="pre">sandbox</span> <span class="pre">connect</span> <span class="pre">&lt;name&gt;</span></code> and run <code class="docutils literal notranslate"><span class="pre">export</span> <span class="pre">GITHUB_TOKEN=&lt;your-token&gt;</span></code>. This skips the provider workflow but the token is not persisted across sandbox recreations.</p></li>
+</ol>
+</div>
 <p>Create a provider that reads your GitHub token from the environment:</p>
 <div class="highlight-console notranslate"><div class="highlight"><pre><span></span><span class="gp">$ </span>nemoclaw<span class="w"> </span>provider<span class="w"> </span>create<span class="w"> </span>--name<span class="w"> </span>my-github<span class="w"> </span>--type<span class="w"> </span>github<span class="w"> </span>--from-existing
 </pre></div>