nemoclaw-user-manage-policy

Configure NemoClaw sandbox network access by adding or removing endpoints via OpenShell policy-add and policy-remove commands. This modifies live sandbox policies or creates persistent presets to enforce least-privilege egress for your integrations.

Restrict egress traffic in an OpenShell sandbox by applying least-privilege network policies. Use policy-list to verify active presets and ensure only specified third-party services are allowed without broad network exposure.

Yes, you can onboard new third-party integrations by adding specific endpoints to the sandbox policy. Use policy-add workflows to enable necessary services and validate changes using OpenShell TUI outputs before deploying across environments.

Test sandbox policy changes by validating them with OpenShell TUI or policy-list outputs. This ensures intended integrations function correctly and maintain least-privilege access before applying presets across development, staging, or production sandboxes.

Remove an allowed endpoint from a NemoClaw network policy by using the policy-remove workflow. Reflecting these changes in the sandbox registry ensures your egress rules remain auditable and strictly enforced.

Yes, OpenShell policy tooling is required to manage NemoClaw sandbox egress rules. It provides the necessary policy-add, policy-list, and policy-remove commands to modify live policies and create persistent presets.