nemoclaw-user-manage-policy

To approve blocked sandbox network requests in NemoClaw, open the OpenShell TUI and walk through each blocked agent request to decide whether to allow it or update the running policy.

Managing dynamic and static sandbox network policies involves reviewing blocked agent requests in the TUI to add, remove, or modify allowed endpoints across both runtime and baseline configurations during onboarding and maintenance.

Yes, you can modify the baseline network policy for NemoClaw sandboxes during onboarding by applying static policy changes and walking through a guided script to validate and persist baseline endpoint configurations.

Yes, you need the OpenShell CLI to review blocked agent requests, as the TUI-based approval workflow requires a configured NemoClaw sandbox and access to policy files to validate and persist changes.

Agent network requests are blocked in the NemoClaw sandbox because the active network policy restricts egress traffic, requiring operators to explicitly approve and add endpoints to the allowed list via the TUI.

Update runtime policies for immediate dynamic egress changes during active operation, and modify baseline static policies to persist allowed endpoints across NemoClaw sandbox restarts and onboarding processes.