Skip to content

docs(policy): list the teams preset in the Open tier table - #9504

Merged
prekshivyas merged 1 commit into
NVIDIA:mainfrom
udsy19:docs/open-tier-teams-row
Aug 18, 2026
Merged

docs(policy): list the teams preset in the Open tier table#9504
prekshivyas merged 1 commit into
NVIDIA:mainfrom
udsy19:docs/open-tier-teams-row

Conversation

@udsy19

@udsy19 udsy19 commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Summary

The Policy Tiers table in docs/reference/network-policies.mdx did not list the teams preset in its Open
row, while the open tier in nemoclaw-blueprint/policies/tiers.yaml has applied that preset since commit
17d03317b (#5585). An operator who read this table before selecting Open was not told that the tier opens
Microsoft Teams egress by default. The Open row now names teams in the position it occupies in
tiers.yaml, with the experimental tag that docs/reference/platform-support.mdx records for the channel.

Related Issue

Fixes #9503

This repeats a correction the project already accepted. Issue #3688 reported the identical drift for
wechat, and PR #4276 (commit a5768a244) corrected the same row the same way. PR #5585 added teams to
the open tier and stated that it would "Leave user-facing documentation to a follow-up docs-owner change";
that follow-up did not reach this page.

Changes

  • docs/reference/network-policies.mdx: add `teams` (experimental) to the Open row of the Policy
    Tiers table, between whatsapp and jira, matching the preset order in
    nemoclaw-blueprint/policies/tiers.yaml.

One existing table row changed. Net line delta is ±0 (1 insertion, 1 deletion, one file). No new
abstraction, configuration, fallback, migration, or compatibility path.

Checked and unchanged: the Restricted, Balanced, and Personal rows already match tiers.yaml, so teams
is the table's only omission.

Not changed, and offered here instead: the <AgentOnly variant="openclaw"> note earlier on the same page
says "The baseline policy does not include messaging endpoints for Telegram, Discord, Slack, WeChat, or
WhatsApp." That sentence omits Microsoft Teams and also Google Chat. Google Chat is not a tier preset, so
that sentence belongs to a different premise than this tier-table drift, and adding only Teams would leave
a new partial list. Say the word and I will extend that note in this PR or a separate one.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification: the change is one documentation table cell and alters no
    executable behavior. npm run docs is the validation for this page. If you want a guard against the next
    recurrence, the natural home is the existing tier-loader test surface for src/lib/policy/tiers.ts: one
    case that reads resolveTierPresets("open") and asserts each preset name appears in the Open row of
    docs/reference/network-policies.mdx. That adds lines, so I left it out of this ±0 change and will add it
    in this PR if you prefer it here.
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

  • Documentation writer subagent reviewed the completed changes
  • Result: docs-updated
  • Evidence: Updated docs/reference/network-policies.mdx. The writing rules and documentation style were reviewed.
  • Agent: Pi CLI

Verification

  • PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run validate:pr passed after refreshing origin/main when hooks were skipped or unavailable — npm run validate:pr passed after refreshing origin/main and rebasing onto the current main
  • Targeted behavior tests pass for the current change set, or tests are marked not applicable above — marked not applicable above; npm run docs exits 0
  • Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result:
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only) — 0 errors. The two reported warnings are
    the unauthenticated Fern redirects check and the site accent-color contrast ratio; both appear identically
    on an unmodified checkout of this page.
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Udaya Tejas udayatejas2004@gmail.com

Summary by CodeRabbit

  • Documentation
    • Updated network policy reference documentation to include the experimental teams preset in the Open policy tier.

@copy-pr-bot

copy-pr-bot Bot commented Aug 18, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@coderabbitai

coderabbitai Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 6da1a599-f87e-4847-9fb2-30989b03fd57

📥 Commits

Reviewing files that changed from the base of the PR and between d583fa1 and 4afcff3.

📒 Files selected for processing (1)
  • docs/reference/network-policies.mdx

Included review availability: Your plan includes up to 12 reviews per rolling hour; 5 remain after this review.


📝 Walkthrough

Walkthrough

The Open tier policy table now lists the experimental teams preset.

Changes

Network policies documentation

Layer / File(s) Summary
Update Open tier preset listing
docs/reference/network-policies.mdx
The Open tier’s default preset list now includes the experimental teams integration.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 4afcf

This localized documentation correction makes the Open tier’s Microsoft Teams egress preset visible without changing executable behavior; no actionable merge-blocking risk remains after normal checks and review.

Suggested reviewers: aasthajh

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Linked Issues check ✅ Passed The change satisfies issue #9503 by adding teams in the required order and marking it experimental.
Out of Scope Changes check ✅ Passed The pull request changes only the targeted Open tier documentation row and introduces no unrelated code or configuration changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the documentation change to list the teams preset in the Open tier table.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@cv cv added chore Build, CI, dependency, or tooling maintenance area: docs Documentation, examples, guides, or docs build area: policy Network policy, egress rules, presets, or sandbox policy labels Aug 18, 2026

@prekshivyas prekshivyas left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved at exact head 4afcff3. Verified the policy source matches the shipped Open tier, generated all agent variants, and ran the full documentation validation successfully.

The Open row of the Policy Tiers table omitted `teams`. The `open` tier in
nemoclaw-blueprint/policies/tiers.yaml has applied that preset since commit
17d0331, and the same page names that file as the store for tier definitions.
An operator who selected Open from this table was not told that the tier opens
Microsoft Teams egress by default.

Commit a5768a2 corrected the same row the same way when it was missing
`wechat`. This change repeats that correction for `teams` and keeps the
experimental tag that docs/reference/platform-support.mdx records for the
Microsoft Teams channel.

Signed-off-by: Udaya Tejas <udayatejas2004@gmail.com>
@udsy19
udsy19 force-pushed the docs/open-tier-teams-row branch from 4afcff3 to 0473cf7 Compare August 18, 2026 20:30
@apurvvkumaria apurvvkumaria self-assigned this Aug 18, 2026
@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — Informational

Advisor assessment: Informational / low confidence
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions
Status: Same-session synthesis validation failed; the advisor result is incomplete.

Model lanes

  • GPT-5.6 Terra (primary): Completed · low confidence · 0 blockers · 0 warnings · 0 suggestions
  • Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
  • Model comparison: normalized findings match; normalized terminology decisions match; normalized E2E selections match; severity counts match.

Second-opinion terminology and E2E selections are advisory. Live E2E does not run automatically for pull requests.

E2E guidance

Advisory only. A maintainer can dispatch the default E2E suite for the commit under review.

Recommended E2E: None

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

@rsliter rsliter left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review: PASS

Commit under review: 0473cf7071dd221b8f16813a3d4ca7ef7df1bbf8
Base SHA: b2d1ce52a716444b083f6e3b8ed8bace1cba3240

The one-cell documentation correction matches nemoclaw-blueprint/policies/tiers.yaml: the Open tier already includes the teams preset between whatsapp and jira. Marking Teams experimental is consistent with the current platform-support documentation. The change discloses existing egress rather than enabling new egress or changing policy behavior.

Nine-category result:

  1. Input validation: PASS.
  2. Authentication and authorization: PASS.
  3. Secrets and sensitive data: PASS.
  4. Command and code injection: PASS.
  5. Path and filesystem safety: PASS.
  6. Network security: PASS.
  7. Cryptography and integrity: PASS.
  8. Dependency and supply-chain risk: PASS.
  9. Denial of service and failure handling: PASS.

The exact documentation receipt is current. Fern preview and docs-only checks passed. The PR description should check “Sensitive paths changed” and cite this review because the changed page documents policy egress.

Cross-issue sweep progress:

  • Step 1: Extract fingerprint
  • Step 2: Search candidate issues
  • Step 3: Classify each candidate
  • Step 4: Apply reverse-link boost
  • Step 5: Filter
  • Step 6: Render report

No adjacent fixes or contradictions were found above the medium-confidence floor.

@prekshivyas
prekshivyas merged commit 96e05c7 into NVIDIA:main Aug 18, 2026
44 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build area: policy Network policy, egress rules, presets, or sandbox policy chore Build, CI, dependency, or tooling maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

reference/network-policies.mdx Open tier listing omits the teams preset

6 participants