{
  "slug": "render-ea-sandboxes-create-adds-https-egress-allow-list-option-9b2737275a5d",
  "title": "render ea sandboxes create adds HTTPS egress allow-list option",
  "tools": [
    "render"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-10-18T19:34:55.000Z",
  "announced_at": "2026-10-18T19:34:55.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When creating a sandbox that needs outbound HTTPS access to specific domains, run `render ea sandboxes create --allow-egress-https <domain>` and repeat the flag for each domain. If no network policy is specified, this sets the `allow-list` policy.",
    "examples": [
      "render ea sandboxes create --allow-egress-https <domain>"
    ],
    "gotchas": [
      "Version: v2.30.0",
      "--allow-egress-https <domain>: Allows outbound HTTPS to the specified domain; repeat for multiple domains.",
      "Prerequisite: Sandbox commands use the `render ea` namespace during early access.",
      "Prerequisite: Render Sandboxes is in early access; request access is available from Render.",
      "The flag allows outbound HTTPS to specific domains.",
      "Repeat the flag for multiple domains.",
      "The flag sets the `allow-list` network policy only if no policy is specified.",
      "Docs conflict: The current Sandboxes CLI reference does not list `--allow-egress-https`; it lists `--network-policy` values `allow-all` and `deny-all` and a default of `allow-all`. The v2.30.0 release note documents the new flag and its `allow-list` default behavior."
    ]
  },
  "why_it_matters": "Create a sandbox that can make outbound HTTPS requests to specific domains.",
  "sources": [
    "https://github.com/render-oss/cli/releases/tag/v2.30.0",
    "https://render.com/docs/sandboxes-cli-reference"
  ],
  "rank": 0.94025,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "daily-20261019-04",
    "verdict_id": "daily-20261019-04:daily-20261019-04-621cf27d340e1881-0:gate",
    "evidence_hash": "a39c035e7235762681a63df9a2f510fdd107b20afc013427f111d3082658caed"
  },
  "review": {
    "draft_hash": "ce89a43f62ead2b39cfb6c65306554da9946838de412937ceee206c4d354872a",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-18T19:34:55.000Z",
    "decision": "daily-20261019-04:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.94 >= 0.9; 2 needed) and Jev gave 0.68 (>= 0.6 needed)."
  }
}
