# PolicyLayer


[API catalog](/reference/api/) · [Docker Sandboxes overview](/reference/api/sandboxes/latest/) · [Product manual](https://docs.docker.com/ai/sandboxes-api/) · [OpenAPI specification](/reference/api/sandboxes/api.yaml)

API version: v1


> This API is experimental. Features, interfaces,
> and behavior may change.




Schema constraints and annotations:

```json
{
  "description": "PolicyLayer identifies where an effective rule came from. ORG and OWNER are\nthe two governance scopes; exactly one governs a caller, so a conforming effective view never mixes them.\n\nValues:\nunspecified: unspecified means the layer is unknown or not reported.\norg: org is org-level governance policy.\nowner: owner is owner-level governance policy.\nkit: kit is the sandbox-scoped policy a kit contributes.\nattached: attached is a governance policy bound to the sandbox: an inline document or a referenced policy id, materialized and bound by the governance plane at create.\ngateway: gateway is an enforced runtime-owned gateway policy contribution, not a backend service-route exemption.\ndefault: default is an explicit installed default-policy contribution, not a substitute for unknown provenance or an owner-level policy.",
  "enum": [
    "unspecified",
    "org",
    "owner",
    "kit",
    "attached",
    "gateway",
    "default"
  ],
  "title": "PolicyLayer",
  "type": "string"
}
```