Skip to content

docs(policy): replace developer walkthrough command - #6601

Merged
cv merged 1 commit into
mainfrom
codex/docs-6557-network-policy-command
Jul 9, 2026
Merged

docs(policy): replace developer walkthrough command#6601
cv merged 1 commit into
mainfrom
codex/docs-6557-network-policy-command

Conversation

@miyoungc

@miyoungc miyoungc commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

Replaces the source-checkout-only ./scripts/walkthrough.sh command in the network policy reference with the operator-facing openshell term command.
The reference had retained a developer helper even after a user-facing approval guide existed, and docs validation checked syntax and routes rather than whether the command was available to installed users.
The page now routes readers to the existing approval how-to for detailed navigation and controls.

Related Issue

Closes #6557

Changes

  • Replaced the developer walkthrough command with openshell term in docs/reference/network-policies.mdx.
  • Linked the operator approval flow to the existing user-facing approval guide.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification: doc-only command correction with no runtime behavior or targeted test contract change.
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification:
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: docs-only network policy reference correction reviewed against the current operator approval guide; no policy enforcement or security behavior changed.
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

  • PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
  • Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: tests are not applicable because only a documentation command sample and route-style link changed.
  • Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: not applicable to this focused doc-only change.
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only) — completed with 0 errors; Fern reported one hidden warning and an upgrade notice.
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Miyoung Choi miyoungc@nvidia.com

Summary by CodeRabbit

  • Documentation
    • Updated the Operator Approval Flow guide with clearer steps for opening the TUI during request monitoring.
    • Added a direct link to the step-by-step approval controls for easier navigation.
    • Removed an outdated walkthrough reference from the instructions.

@miyoungc miyoungc added the area: docs Documentation, examples, guides, or docs build label Jul 9, 2026
@miyoungc miyoungc self-assigned this Jul 9, 2026
@coderabbitai

coderabbitai Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 60fbc33e-5562-4e26-8996-3fb6e0e4eb9b

📥 Commits

Reviewing files that changed from the base of the PR and between 614122b and ba7be3e.

📒 Files selected for processing (1)
  • docs/reference/network-policies.mdx

📝 Walkthrough

Walkthrough

The Operator Approval Flow documentation now directs users to open the TUI with openshell term, links to approval and navigation controls, and removes the ./scripts/walkthrough.sh walkthrough reference.

Changes

Operator approval documentation

Layer / File(s) Summary
TUI approval instructions
docs/reference/network-policies.mdx
Replaces the developer walkthrough command with openshell term instructions and a link to step-by-step approval controls.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly describes the doc-only replacement of the developer walkthrough command.
Linked Issues check ✅ Passed The docs replace ./scripts/walkthrough.sh with openshell term, matching the issue's user-facing command requirement.
Out of Scope Changes check ✅ Passed The changes stay focused on the network-policies doc and the requested command replacement.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/docs-6557-network-policy-command

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Advisor Recommendation

Required E2E: None
Optional E2E: None

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E

  • None. Docs-only change to network policy reference content. It cannot affect runtime behavior or user-flow execution, and the deterministic risk plan lists no required jobs.

Optional E2E

  • None.

New E2E recommendations

  • None.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Target Recommendation

Required E2E targets: None
Optional E2E targets: None

Workflow run

Full E2E target advisor summary

E2E Target Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E targets

  • None. Documentation-only change outside E2E target-relevant paths; no E2E target dispatch is required.

Optional E2E targets

  • None.

Relevant changed files

  • None.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: Add or justify PRA-T1 and any related test follow-ups.
Open items: 0 required · 0 warnings · 0 suggestions · 1 test follow-up

Action checklist

  • PRA-T1 Add or justify test follow-up: Acceptance clause
Test follow-ups to resolve or justify

If these cover changed behavior, prefer adding them in this PR; otherwise state why existing coverage is enough or link the follow-up.

  • PRA-T1 Acceptance clause — See NVBug for full reproduction steps and environment details. — add test evidence or identify existing coverage. The public GitHub issue body contains only this pointer, and no issue comments were returned; NVBug details are not available in the reviewed context.

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor (Nemotron Ultra) — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: No advisor follow-up required beyond maintainer review.
Open items: 0 required · 0 warnings · 0 suggestions · 0 test follow-ups
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@miyoungc

miyoungc commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator Author

PRA-T1 justification: the public issue provides no accessible acceptance details beyond its title and NVBug pointer. The observable acceptance criteria for this issue-scoped docs fix are that docs/reference/network-policies.mdx no longer presents ./scripts/walkthrough.sh as the operator command, uses the canonical user-facing openshell term command, and links to the existing approval how-to. Evidence: npm run docs completed with 0 errors, CI docs-only-checks and the Fern preview passed, and the route-style link resolves. No targeted runtime test applies because this changes only a documentation command sample and link, with no existing targeted behavior-test contract.

@cv
cv merged commit 22d47cd into main Jul 9, 2026
43 of 48 checks passed
@cv
cv deleted the codex/docs-6557-network-policy-command branch July 9, 2026 21:42
@cv

cv commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

Post-merge variant audit found that the new relative approval-guide link resolves to an unpublished Deep Agents route. Follow-up #6608 scopes the link to OpenClaw/Hermes and adds the shared page to the published-route regression guard.

cv added a commit that referenced this pull request Jul 10, 2026
<!-- markdownlint-disable MD041 -->
## Summary
Scopes the approval-guide link introduced by #6601 to OpenClaw and
Hermes, the variants that publish that route.
Adds the shared Network Policies page to the published-route guard so a
generated Deep Agents guide cannot reintroduce the 404.

## Related Issue
Follow-up to #6601.

## Changes

- Render the approval-guide cross-reference only for OpenClaw and
Hermes.
- Guard `reference/network-policies.mdx` in the published-route checker.
- Add a regression test for the exact OpenClaw, Hermes, and Deep Agents
variant behavior.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [x] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates
<!-- Check exactly one tests line and one docs line. Check other lines
when applicable. Add every requested justification or approval
reference. -->
- [x] Tests added or updated for changed behavior
- [ ] Existing tests cover changed behavior — justification:
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [x] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [x] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification: maintainer review
confirmed this changes only variant-specific documentation routing;
runtime policy enforcement and approval behavior are unchanged.
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each applicable item only when supported by the requested
evidence. Run targeted tests once per relevant change set and rerun
after later edits or hook autofixes that can affect the tested behavior.
Do not rerun hook-covered checks. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — command/result or justification: `npx
vitest run --project integration
test/network-policies-published-routes.test.ts
test/check-docs-published-routes.test.ts` passed 2 files and 4 tests.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: not run; this is a focused
docs route and guard change with targeted coverage.
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) — passed
with 0 errors; Fern reported 2 existing hidden warnings.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)
— not applicable; no new documentation page.

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Carlos Villela <cvillela@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Bug Fixes**
* Updated the Network Policies docs so the step-by-step approval guide
link only appears for supported variants, reducing broken or irrelevant
links.
* **Tests**
* Added coverage to confirm the published documentation routes resolve
correctly for the Network Policies page.
* **Chores**
* Expanded documentation link checks to include an additional guarded
reference page.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Hadar301 pushed a commit to Hadar301/NemoClaw-OpenShift that referenced this pull request Jul 12, 2026
<!-- markdownlint-disable MD041 -->
## Summary
Replaces the source-checkout-only `./scripts/walkthrough.sh` command in
the network policy reference with the operator-facing `openshell term`
command.
The reference had retained a developer helper even after a user-facing
approval guide existed, and docs validation checked syntax and routes
rather than whether the command was available to installed users.
The page now routes readers to the existing approval how-to for detailed
navigation and controls.

## Related Issue
Closes NVIDIA#6557

## Changes
- Replaced the developer walkthrough command with `openshell term` in
`docs/reference/network-policies.mdx`.
- Linked the operator approval flow to the existing user-facing approval
guide.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [x] Doc only (includes code sample changes)

## Quality Gates
<!-- Check exactly one tests line and one docs line. Check other lines
when applicable. Add every requested justification or approval
reference. -->
- [ ] Tests added or updated for changed behavior
- [ ] Existing tests cover changed behavior — justification:
- [x] Tests not applicable — justification: doc-only command correction
with no runtime behavior or targeted test contract change.
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [x] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [x] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification: docs-only network
policy reference correction reviewed against the current operator
approval guide; no policy enforcement or security behavior changed.
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each applicable item only when supported by the requested
evidence. Run targeted tests once per relevant change set and rerun
after later edits or hook autofixes that can affect the tested behavior.
Do not rerun hook-covered checks. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — command/result or justification: tests
are not applicable because only a documentation command sample and
route-style link changed.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: not applicable to this
focused doc-only change.
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) —
completed with 0 errors; Fern reported one hidden warning and an upgrade
notice.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Documentation**
* Updated the Operator Approval Flow guide with clearer steps for
opening the TUI during request monitoring.
* Added a direct link to the step-by-step approval controls for easier
navigation.
  * Removed an outdated walkthrough reference from the instructions.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Hadar301 pushed a commit to Hadar301/NemoClaw-OpenShift that referenced this pull request Jul 12, 2026
<!-- markdownlint-disable MD041 -->
## Summary
Scopes the approval-guide link introduced by NVIDIA#6601 to OpenClaw and
Hermes, the variants that publish that route.
Adds the shared Network Policies page to the published-route guard so a
generated Deep Agents guide cannot reintroduce the 404.

## Related Issue
Follow-up to NVIDIA#6601.

## Changes

- Render the approval-guide cross-reference only for OpenClaw and
Hermes.
- Guard `reference/network-policies.mdx` in the published-route checker.
- Add a regression test for the exact OpenClaw, Hermes, and Deep Agents
variant behavior.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [x] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates
<!-- Check exactly one tests line and one docs line. Check other lines
when applicable. Add every requested justification or approval
reference. -->
- [x] Tests added or updated for changed behavior
- [ ] Existing tests cover changed behavior — justification:
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [x] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [x] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification: maintainer review
confirmed this changes only variant-specific documentation routing;
runtime policy enforcement and approval behavior are unchanged.
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each applicable item only when supported by the requested
evidence. Run targeted tests once per relevant change set and rerun
after later edits or hook autofixes that can affect the tested behavior.
Do not rerun hook-covered checks. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — command/result or justification: `npx
vitest run --project integration
test/network-policies-published-routes.test.ts
test/check-docs-published-routes.test.ts` passed 2 files and 4 tests.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: not run; this is a focused
docs route and guard change with targeted coverage.
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) — passed
with 0 errors; Fern reported 2 existing hidden warnings.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)
— not applicable; no new documentation page.

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Carlos Villela <cvillela@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Bug Fixes**
* Updated the Network Policies docs so the step-by-step approval guide
link only appears for supported variants, reducing broken or irrelevant
links.
* **Tests**
* Added coverage to confirm the published documentation routes resolve
correctly for the Network Policies page.
* **Chores**
* Expanded documentation link checks to include an additional guarded
reference page.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[All Platforms][Docs] network-policies page contains ./scripts/walkthrough.sh which is a developer script, not a user command

3 participants