EN Guides Policy

Policy

Sandboxes start default-deny. The base policy YAML plus composed credential provider profiles form the effective allowlist enforced by the egress proxy.

Set and get

whaleshell policy get demo --full
whaleshell policy set demo --policy /path/to/policy.yaml --wait

--wait blocks until the sidecar reloads the bind-mounted effective YAML.

policy.local (guest)

Inside the sandbox, agents can query denials and propose narrow rules via policy.local (MITM HTTPS to the sidecar):

Method	Path
GET	/v1/policy/current
GET	/v1/denials?last=N
POST	/v1/proposals
GET	/v1/proposals/{id}/wait

Operator approve loop

whaleshell rule get --status pending
whaleshell rule approve --chunk-id chk_…
# or: whaleshell rule reject --chunk-id chk_… --reason "narrow to /docs"

Approve merges into the sandbox base policy, rewrites the live policy file, and hot-reloads the sidecar. Prefer the smallest addRule that unblocks the task.

Schema keys

Policy documents use filesystem_policy, landlock, and network_policies (whaleshell-core/policy). L7 rules may set protocol: rest|graphql|mcp with method/path/tool constraints.

Related

• POLICY_LOCAL.md
• POLICY_RELOAD.md
• Skill: /etc/whaleshell/skills/policy-advisor