From c4fa715ed26077b9a5aa2ab0a1e2ae8ddd08e184 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 6 Oct 2026 13:56:29 +0000
Subject: [PATCH] docs(website): sync dev docs from
 0bca9fb8280045224c910610cba005b7fa5a6a83

---
 fern/.docs-snapshots.yml                           | 6 +++---
 fern/pages-dev/how-it-works/sandboxes/runtimes.mdx | 5 +++++
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/fern/.docs-snapshots.yml b/fern/.docs-snapshots.yml
index 9a407e411..582d646e4 100644
--- a/fern/.docs-snapshots.yml
+++ b/fern/.docs-snapshots.yml
@@ -1,8 +1,8 @@
 snapshots:
   dev:
-    source-ref: 4a0208fa695d8881f4210e8a89d94af6d895c267
-    source-sha: 4a0208fa695d8881f4210e8a89d94af6d895c267
-    version: 0.1.3.dev102
+    source-ref: 0bca9fb8280045224c910610cba005b7fa5a6a83
+    source-sha: 0bca9fb8280045224c910610cba005b7fa5a6a83
+    version: 0.1.3.dev104
   latest:
     source-ref: 6648bd0c290efbc41ba131ee9831ee45cd431f94
     source-sha: 6648bd0c290efbc41ba131ee9831ee45cd431f94
diff --git a/fern/pages-dev/how-it-works/sandboxes/runtimes.mdx b/fern/pages-dev/how-it-works/sandboxes/runtimes.mdx
index a8aec4fb4..b3b9fa051 100644
--- a/fern/pages-dev/how-it-works/sandboxes/runtimes.mdx
+++ b/fern/pages-dev/how-it-works/sandboxes/runtimes.mdx
@@ -44,6 +44,11 @@ driver TOML overrides the compiled release defaults. Helm renders Kubernetes
 image fields into TOML, so they apply when these environment variables are
 unset. Sandbox requests cannot override either trusted image.
 
+When building your own gateway or supervisor image, the `GATEWAY_BASE_IMAGE`
+and `SUPERVISOR_BASE_IMAGE` build arguments override their pinned bases. See
+[Container Image Base Overrides](https://github.com/NVIDIA/OpenShell/blob/main/CONTRIBUTING.md#container-image-base-overrides)
+for build commands and base compatibility requirements.
+
 For TLS-enabled Docker, Podman, and MicroVM gateways, set `guest_tls_ca` in
 `[openshell.gateway]` or use the package-managed local CA. Remove the retired
 `guest_tls_cert` and `guest_tls_key` fields. Supervisors receive only the