# AllowlistV0


[API catalog](/reference/api/) · [AI Governance overview](/reference/api/ai-governance/latest/) · [Product manual](https://docs.docker.com/ai/sandboxes/governance/) · [OpenAPI specification](/reference/api/ai-governance/api.yaml)

API version: 1



Schema constraints and annotations:

```json
{
  "description": "Network or filesystem allowlist containing a list of rules. Present on\nPolicy when `PolicySummary.type` is `allowlist_v0`; omitted when the\npolicy has no rules yet. All rules in an allowlist share the same domain.\nAll rules are evaluated on every request: `deny` always wins over `allow`.\n",
  "properties": {
    "domain": {
      "description": "The access-control domain shared by all rules in this allowlist. Derived from rule actions: network actions (`connect:tcp`, `connect:udp`) produce `network`; filesystem actions (`read`, `write`) produce `filesystem`. Present when `rules` is non-empty; absent when the allowlist has no rules.\n",
      "enum": [
        "network",
        "filesystem"
      ],
      "examples": [
        "network"
      ],
      "type": "string"
    },
    "rules": {
      "items": {
        "$ref": "#/components/schemas/Rule"
      },
      "type": "array"
    }
  },
  "required": [
    "rules"
  ],
  "type": "object"
}
```