nemoclaw-user-manage-policy

You can manage NemoClaw sandbox egress by adding, removing, or modifying allowed network endpoints. This Skill supports both persistent baseline policy edits and non-destructive dynamic updates for running sandboxes.

Yes, dynamic policy updates allow you to add or remove endpoint access on a running sandbox without restarting. This is achieved using non-destructive preset-format merges via the policy-add command.

To apply an existing preset to a running sandbox, use the nemoclaw command with policy-add. For example, run 'nemoclaw my-assistant policy-add pypi --yes' to quickly integrate the preset.

Static policy changes edit the baseline policy blueprint so endpoint access persists after sandbox recreation. Dynamic policy updates apply preset-format merges to a running sandbox without requiring a restart.

Yes, interactive approvals let you review and approve blocked requests in OpenShell’s TUI. This allows you to make safe, one-off access decisions for your sandbox endpoints.

Yes, safe enforcement is handled through OpenShell policy interception while preserving existing presets. The system uses deterministic merging via policy-add to ensure baseline configurations remain intact.