diff --git a/content/manuals/ai/sandboxes/governance/concepts.md b/content/manuals/ai/sandboxes/governance/concepts.md index ed96c722a2..a46cf0b922 100644 --- a/content/manuals/ai/sandboxes/governance/concepts.md +++ b/content/manuals/ai/sandboxes/governance/concepts.md @@ -37,6 +37,24 @@ share the same domain, either `network` or `filesystem`. MCP policies use Cedar statements written in the `MCP` namespace instead of the network and filesystem rule format. +### Limits + +Organization policies have the following limits, which help ensure fair usage +and resource availability across organizations: + +| Limit | Value | +|---------------------------|-----------------------------------------------------| +| Policies per organization | 100 | +| Rules per policy | 250 | +| Policy size | 400 KB total, shared across all of a policy's rules | + +Typical policies use only a small fraction of the policy size limit. Domain +and file path values have no separate length limit beyond valid format. + +If these limits don't fit your organization's needs, +[contact Docker Sales](https://www.docker.com/products/ai-governance/#contact-sales) +to discuss options. + ## Policy scope Each organization policy applies either across the whole organization or only