Unverified50% confidenceDecision RuleExact time
The network egress of an agent sandbox should adopt a strict whitelist mode, allowing access only to explicitly listed domain names and endpoints, and blocking everything else.
1
Sources
50%
Confidence
Long-term
Relevance
9/20/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在局域网中开放 Web 服务时，建议配置 HTTP Basic Auth 认证或 IP 白名单限制以防止未授权访问76% similarUnverifiedOpen Cloud implements a whitelist mechanism that restricts inter-agent communication to only those agents explicitly listed in the whitelist71% similarUnverifiedIn whitelist mode, an egress firewall denies all outbound connections by default, only allowing traffic that matches predefined rules (destination IP/CIDR, port, protocol, domain name).71% similarUnverifiedIt is recommended to run AI coding agents in a sandboxed or containerized environment, restricting outbound traffic through network policies to allow access only to whitelisted addresses.69% similarUnverified策略规则通常涵盖文件访问白名单/黑名单、命令执行过滤、网络访问控制和数据脱敏规则，遵循最小权限原则65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/937219API
curl https://kongchang.com/api/v1/knowledge/claims/937219MCP
get_claim(id=937219)