Skills
Enforce NVIDIA's three non-negotiable agent sandbox controls: egress allowlist, workspace write limits, config-file lockdown
NVIDIA's 2026 sandboxing guidance defines three mandatory controls for autonomous coding agents: (1) network egress allowlists via HTTP proxy/IP/port so the agent calls only permitted APIs and all other outbound traffic alerts; (2) workspace write restrictions that exclude dotfiles and auto-executing config directories; (3) configuration-file protection that blocks all agent modification of hooks, MCP server defs, and IDE extensions regardless of approval level — manual user edits only. Reference implementation is NVIDIA OpenShell, governed by declarative YAML policies.
↳ Follow the thread