2 Commits

Include renames

Author	SHA1	Message	Date
Craig Osterhout	bf47d790ad	ai-gov: update deny rule behavior and add new flag (#25714) ... <!--Delete sections as needed --> ## Description Update governance docs for local deny rules. - Clarified that local deny rules are evaluated under org governance and layer on top of org policy. Only allow rules are inactive. - Added examples of the `--deny-network` flag (new in v0.38) on `sbx create` and `sbx run`, which sets per-sandbox deny rules at creation time. https://deploy-preview-25714--docsdocker.netlify.app/ai/sandboxes/governance/ ## Related issues or tickets https://docker.slack.com/archives/C097C5LRXFF/p1785455753455409 ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [ ] Technical review - [ ] Editorial review - [ ] Product review --------- Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>	2026-08-06 23:01:43 -07:00
3 people	fcc56a0b2c	sbx: local mcp gateway and mcp governance (#25559) ... ## Summary Add Docker Sandboxes MCP docs for the local gateway path, including `sbx mcp` usage, OAuth behavior, bundles, explicit sandbox exposure, built-in gateway tools, and MCP access-governance documentation. Generated by Codex ## Scope note for reviewers This PR deliberately documents the local MCP gateway path only. That is the path that ships by default for Docker Sandboxes: servers and bundles are registered on the host, exposed explicitly to sandboxes, and governed through the local gateway surface. Remote, SaaS, and self-hosted gateway behavior is intentionally out of scope for this PR. That includes dynamic discovery tools such as `mcp-find` and `mcp-add`, remote dataplane behavior, and setup for non-local gateways. These will be documented in a follow-up PR. The MCP policy reference is likewise limited to values available in the local gateway path. Hosted-only policy surface, including the `container-stdio` server type, `resource.category`, and `context.oauth_scopes`, is deferred to the same follow-up. Preview links: - [MCP gateway](https://deploy-preview-25559--docsdocker.netlify.app/ai/sandboxes/mcp-gateway/) - [MCP policies concept](https://deploy-preview-25559--docsdocker.netlify.app/ai/sandboxes/governance/concepts/#mcp-policies) - [MCP access policies](https://deploy-preview-25559--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/mcp/) - [MCP policy reference](https://deploy-preview-25559--docsdocker.netlify.app/ai/sandboxes/governance/reference/mcp-policy/) --------- Co-authored-by: Codex <noreply@openai.com> Co-authored-by: Claude <noreply@anthropic.com>	2026-08-06 14:49:00 +02:00