sbx: governance

[dvdksn]

Adds information about org governance/policy features with sbx.

Stacked on #24978

Preview: https://deploy-preview-25016--docsdocker.netlify.app/ai/sandboxes/security/governance/

[netlify]

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	6f2dc86
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6a01fdade2d8bb00070e5e2d
😎 Deploy Preview	https://deploy-preview-25016--docsdocker.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[docker-agent]

Assessment: 🟢 APPROVE

The PR adds organization governance/policy documentation for AI Sandboxes, including a new governance.md page, updated security index, policy command documentation, and cross-references across existing pages.

Review summary:

• Documentation content is accurate and well-structured
• Front matter (title, description, keywords) is present on all new/modified pages
• No broken internal links or incorrect commands detected
• No style guide violations (hedge words, AI-isms, marketing speak) in the added lines
• The data/sbx_cli/ YAML edits are appropriate — this directory is not listed as vendored in AGENTS.md (only data/cli/ is vendored), and the edits are consistent with a Docker maintainer adding new governance feature documentation

No issues found that require changes.

[docker-agent]

Assessment: 🔴 CRITICAL

1 critical finding (vendored files manually edited) + 2 medium findings in governance.md.

[docker-agent]

Assessment: 🟡 NEEDS ATTENTION

3 medium findings in new content. No high-severity issues. No vendored files touched, no missing redirects.

[usha-mandya]

LGTM

[docker-agent]

Assessment: 🟢 APPROVE

The changes introduce a new governance.md page and link it from 7 existing files. The content is accurate, well-structured, and consistent with Docker documentation style.

No actionable issues found. The precedence model is correctly documented (org rules take precedence, with delegation carve-outs explained immediately after the general statement), and the troubleshooting section correctly describes the automatic daemon restart flow after sbx policy reset.