docs(optimization): add docker sandbox patterns for isolating experimentalist

[BrianNewsom]

Summary

• recommend Docker Sandboxes for laptop Experimentalist runs
• invoke the Tau3 example directly through sbx exec
• document host-service routing and the Apple Silicon Terminal-Bench limitation

Test plan

• Run the Tau3 benchmark and agent end to end inside a Docker Sandbox
• Run make docs-check

Summary by CodeRabbit

• Documentation
  • Updated Experimentalist setup guidance with Docker Engine and Docker Sandboxes prerequisites.
  • Added instructions for isolated execution, environment variables, datasets, proxy settings, security considerations, and host services.
  • Documented artifact inspection, sandbox lifecycle commands, network requirements, and Apple Silicon limitations.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-1084-pr-1034-sandbox.docs.buildwithfern.com/nemo-platform

[coderabbitai]

📝 Walkthrough

Walkthrough

The documentation replaces direct host execution with Docker Sandbox execution for the Experimentalist. It adds versioned prerequisites, environment forwarding, host service access, security limitations, artifact handling, and sandbox lifecycle commands.

Changes

Experimentalist Sandbox Documentation

Layer / File(s)	Summary
Sandbox prerequisites and execution setup docs/get-started/example-agent.mdx, plugins/nemo-experimentalist/README.md	Documents Docker Engine and Docker Sandboxes requirements. Adds commands to create and run the Experimentalist in clone mode with forwarded settings and host service access.
Connectivity and isolation constraints docs/get-started/example-agent.mdx, plugins/nemo-experimentalist/README.md	Describes outbound connectivity, environment separation, platform constraints, and clone-mode visibility limits.
Artifact inspection and sandbox lifecycle docs/get-started/example-agent.mdx	Adds commands to inspect and copy artifacts, then stop or remove the sandbox.

Possibly related PRs

• NVIDIA-NeMo/nemo-platform#896: Extends the Experimentalist README with Docker Sandbox execution guidance.
• NVIDIA-NeMo/nemo-platform#1010: Modifies the Experimentalist workflow in the getting-started guide.

Suggested labels: docs

Suggested reviewers: aleckhoury, sandychapman

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the documentation change and its Docker Sandbox isolation purpose for Experimentalist runs.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch pr-1034-sandbox

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/get-started/example-agent.mdx`:
- Around line 178-181: Add a final “## Next Steps” section to the tutorial after
the existing sbx cleanup commands, including canonical Fern links to relevant
related guides. Ensure this section is the last content in the page and follows
the documentation cross-linking guidelines.
- Around line 167-172: Add concrete sbx commands in
docs/get-started/example-agent.mdx lines 167-172 to inspect run.json, compare
the agent-0 and agent-1 directories, and copy retained artifacts from the
sandbox to the host. In plugins/nemo-experimentalist/README.md lines 99-104, add
the artifact-copy command or link to the complete guide.
- Around line 156-164: Require a sanitized checkout in both documented flows:
update docs/get-started/example-agent.mdx lines 156-164 and
plugins/nemo-experimentalist/README.md lines 88-97 to ensure unrelated secrets
are absent from the Git root before sandbox creation, and keep credentials
outside the repository when needed. Preserve the existing warning while
documenting this requirement for each flow.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 4bbce0ce-7edc-48cc-b262-aff99a847e28

📥 Commits

Reviewing files that changed from the base of the PR and between f45c965 and d5970a2.

📒 Files selected for processing (2)

• docs/get-started/example-agent.mdx
• plugins/nemo-experimentalist/README.md

[github-actions]

Suite	Lines Covered	Line Rate	Branch Rate
Unit Tests	30406/38435	79.1%	63.8%
Integration Tests	18006/37104	48.5%	21.0%