nemoclaw-user-manage-policy

To approve blocked sandbox network requests, open the OpenShell terminal UI to inspect the host, port, binary, and HTTP method of the blocked egress, then interactively allow or deny the request for the running session.

An OpenShell TUI policy update is an interactive process where operators review blocked outbound network requests in a terminal UI and apply dynamic allow or deny decisions that update the running sandbox policy without a restart.

Yes, you can apply policy YAML files to a live sandbox using the OpenShell CLI to dynamically add endpoints to the egress policy without needing to restart the running session.

To make persistent baseline egress policy edits in a NemoClaw blueprint, directly edit the static YAML policy file or merge built-in policy presets to ensure changes survive sandbox restarts.

Yes, NemoClaw supports built-in network policy presets that can be merged into the baseline YAML blueprint during sandbox onboarding to establish declarative egress control.

Use dynamic TUI approvals for temporary debugging access to endpoints during a live session, and use static YAML policy formatting to permanently add allowed endpoints to the baseline blueprint for future restarts.