Skip to main content
PATCH
Replace the network policy

Authorizations

Authorization
string
header
required

Personal byk_ API key; user-principal, resolved to a tenant by org context.

Headers

X-Bonya-Organization-ID
string

Org context. Omitted means the caller's personal organization. A well-formed non-member org is 404; malformed is 400.

Path Parameters

sandbox_id
string
required

Body

application/json
mode
enum<string>
default:open
required

open is unrestricted egress; allowlist allows only the listed destinations; airgap has no network.

Available options:
open,
allowlist,
airgap
allow
object[]
required if mode = allowlist
Maximum array length: 64

Response

Updated sandbox (see network_revision and network_applied_revision)

id
string
required

Sandbox id, for example sb-bpyk22c3ei3hfx.

name
string
required
organization_id
string
required
template_version
string
required
state
enum<string>
required
Available options:
creating,
running,
warm,
cooling,
cold,
waking,
deleting,
deleted,
failed,
lost
generation
integer
required
vcpus
integer
required
memory_mib
integer
required
user_layer_bytes
integer
required
created_at
string<date-time>
required
network
object
required
network_revision
integer
required
network_applied_revision
integer
required

Revision the node is known to enforce; below network_revision until a change is applied.

failure_reason
string
started_at
string<date-time>
deleted_at
string<date-time>
parent_snapshot_id
string

The named snapshot it was created from.

forked_from_sandbox_id
string
pause_source
string

Who paused it: idle, requested, memory_pressure.

image
object
gpu
object
exec_capability_jws
string

Exec capability token, present on responses that carry one.