Support togglable network access for v1 sandboxes.
Context from discussion: network_access=False breaks the model inside the harness inside the sandbox. Whitelisting only the base URL used for intercepting is not sufficient because CLIs also need to download packages.
Requested use case: install an agent in a sandbox where the agent needs to fetch and install packages, instead of patching third-party images during creation.
Support togglable network access for v1 sandboxes.
Context from discussion:
network_access=Falsebreaks the model inside the harness inside the sandbox. Whitelisting only the base URL used for intercepting is not sufficient because CLIs also need to download packages.Requested use case: install an agent in a sandbox where the agent needs to fetch and install packages, instead of patching third-party images during creation.