Files
OpenShell/deploy
Drew Newberry 790e7f8e82 fix(sandbox): replace wildcard hosts with explicit names in network policies
OPA endpoint matching uses exact string equality (lower(ep.host) ==
lower(network.host)), not glob matching. Wildcard patterns like
*.cursor.sh and *.vo.msecnd.net never matched any actual hostname.

Replace wildcards with explicit hostnames: api2.cursor.sh,
repo.cursor.sh, download.cursor.sh for Cursor; az764295.vo.msecnd.net
and gallerycdn.vsassets.io for VS Code.
2026-03-11 17:52:18 -07:00
..