Skip to main content
Source: src/cwsandbox/_types.py:676
Network deny flags and create-time ingress/egress grants. Port exposure uses typed services=. egress and ingress are allow-only rule sets over default-deny; empty/None leaves the runner policy default in effect. Attributes
  • deny_egress (bool | None) : When True, deny all declared egress (policy default unused). Mutually exclusive with a non-empty egress list.
  • deny_ingress (bool | None) : When True, deny CUSTOM ingress (policy default unused).
  • egress (Sequence[EgressRule | Mapping[str, Any]] | None) : Egress grants (EgressRule or dict).
  • ingress (Sequence[IngressRule | Mapping[str, Any]] | None) : CUSTOM-port ingress sources (IngressRule or dict).
Last modified on September 17, 2026