Network Control

Restrict where a sandboxed agent can connect.

Demo content. This page is a template placeholder - the real Levee documentation will replace it.

Levee enforces network policy with the Windows Filtering Platform, so egress rules apply even to child processes the tool spawns.

Allow only what the agent needs

network:
  default: deny
  allow:
    - "api.anthropic.com:443"
    - "registry.npmjs.org:443"
    - "github.com:443"

Test a destination without running the tool

levee net check api.anthropic.com:443
# ALLOW  (rule: allow api.anthropic.com:443)

levee net check 10.0.0.5:5432
# DENY   (rule: default deny)

Fail-closed by design

If the agent dies or the policy fails to load, all egress is blocked. There is no "open" fallback.