Files
OpenShell/docs/reference/default-policy.md
T
Kirit ThadakaandPiotr Mlocek e57c247bc8 docs: Structural and content updates (#195)
* Removed network access docs

* Simplified docs for sandboxes and inference

* Fixed build

* docs(inference): clarify local inference routing

* docs(inference): update provider and model examples

* docs: add Docker prerequisite warning for connection-refused error

Made-with: Cursor

* Minor edits to quickstart safety and privacy

* Doc restructured

* removed tutorials

* Added tutorial

* Inference section reformatting

* Updated CLI ref

* removed troubleshooting

* Updated inference

* Updated pip install command for bug bash

* Updated arch diagram

* Updated tutorial

* Updated install commands

* Updated getting started

* Updated brev link

---------

Co-authored-by: Piotr Mlocek <pmlocek@nvidia.com>
2026-03-10 12:15:02 -07:00

1.0 KiB

Default Policy Reference

The default policy is the policy applied when you create an OpenShell sandbox without --policy. It is defined in the deploy/docker/sandbox/dev-sandbox-policy.yaml file.

Agent Compatibility

The following table shows the coverage of the default policy for common agents.

Agent Coverage Action Required
Claude Code Full None. Works out of the box.
OpenCode Partial Add opencode.ai endpoint and OpenCode binary paths.
Codex None Provide a complete custom policy with OpenAI endpoints and Codex binary paths.

:::{important} If you run a non-Claude agent without a custom policy, the agent's API calls are denied by the proxy. You must provide a policy that declares the agent's endpoints and binaries. :::

Default Policy Blocks

The following tables show the default policy blocks pre-configured in the file.