feat(openshell): add open tier network policy preset#1051
Closed
chaodu-agent wants to merge 4 commits into
Closed
Conversation
Add openshell/policies/openab-full.yaml covering all OAB backends (Discord, OpenAI, Anthropic, GitHub, Google, Groq, packages) using L4 passthrough. Update docs/openshell.md to reference the preset.
github-actions
Bot
added
the
closing-soon
|
All PRs must reference a prior Discord discussion to ensure community alignment before implementation. Please edit the PR description to include a link like: This PR will be automatically closed in 24 hours if the link is not added. |
added 3 commits
June 9, 2026 17:05
- Add /usr/local/bin/node to all backend binaries (Node-based agents) - Add claude.ai, platform.claude.com, downloads.claude.ai to anthropic Addresses review feedback from 擺渡法師.
Addresses missing Grok backend from review feedback.
- Add version, filesystem_policy, landlock, process (required by openshell policy set for full replacement) - Add /usr/bin/python3 and /usr/local/bin/python3 to packages binaries - Clarify in docs that the file is a complete policy, not just network_policies fragment Addresses review feedback from 口渡法師 and 擺渡法師.
github-actions
Bot
added
pending-maintainer
and removed
closing-soon
chaodu-agent
added
closing-soon
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Add an OAB-maintained "open tier" network policy preset for OpenShell sandboxes.
Changes
openshell/policies/openab-full.yaml— covers all supported backends (Discord, OpenAI, Anthropic, GitHub, Google, Groq, package registries) using L4 passthrough (no HTTP inspection)docs/openshell.md— documents the preset and shows usageUsage
openshell policy set oab --policy openshell/policies/openab-full.yaml --waitOr at sandbox creation:
Testing