From 1808ce9024d6e24a418ae6b43b2413042e2c8e42 Mon Sep 17 00:00:00 2001 From: Craig Osterhout Date: Tue, 8 Sep 2026 09:04:36 -0700 Subject: [PATCH] ai-gov: document policy limits (#26046) ## Description Documented policy limitations. ## Related issues or tickets https://docker.slack.com/archives/C097C5LRXFF/p1788526567563859 ## Reviews - [ ] Technical review - [ ] Editorial review - [ ] Product review Signed-off-by: Craig Osterhout --- .../ai/sandboxes/governance/concepts.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/content/manuals/ai/sandboxes/governance/concepts.md b/content/manuals/ai/sandboxes/governance/concepts.md index ed96c722a2..a46cf0b922 100644 --- a/content/manuals/ai/sandboxes/governance/concepts.md +++ b/content/manuals/ai/sandboxes/governance/concepts.md @@ -37,6 +37,24 @@ share the same domain, either `network` or `filesystem`. MCP policies use Cedar statements written in the `MCP` namespace instead of the network and filesystem rule format. +### Limits + +Organization policies have the following limits, which help ensure fair usage +and resource availability across organizations: + +| Limit | Value | +|---------------------------|-----------------------------------------------------| +| Policies per organization | 100 | +| Rules per policy | 250 | +| Policy size | 400 KB total, shared across all of a policy's rules | + +Typical policies use only a small fraction of the policy size limit. Domain +and file path values have no separate length limit beyond valid format. + +If these limits don't fit your organization's needs, +[contact Docker Sales](https://www.docker.com/products/ai-governance/#contact-sales) +to discuss options. + ## Policy scope Each organization policy applies either across the whole organization or only