Reading a sequence figure in this manual
Seven lifelines: the sbx CLI, the sandboxd daemon, the local policy store, a sandbox VM, the host proxy on port 3128, example.com, and Docker Model Runner on port 12434. Ten numbered rows use the eight arrow styles: a CONNECT to example.com:443 as a solid ink call, 403 Forbidden as a dashed rose failure, sbx policy allow network as a call, the rule example.com [tcp] as a solid teal durable write, Rule added as a dashed ink reply, the second CONNECT, the tunnel to example.com as a dashed olive outside effect, POST chat/completions as a solid plum model call, chat.completion.chunk as a dotted indigo stream, and running to stopped as a dashed amber state change.
sbx
CLI
sandboxd
host daemon
policy store
local policy
sandbox VM
the guest
proxy :3128
on the host
example.com
outside
Model Runner
:12434
1
CONNECT example.com:443
a call · solid ink
2
403 Forbidden
a failure · dashed rose
3
allow network
a call · solid ink
4
example.com [tcp]
a durable write · solid teal
5
Rule added
a reply · dashed ink
6
CONNECT example.com:443
the same call, now allowed
7
tunnel to :443
an outside effect · dashed olive
8
POST chat/completions
a model call · solid plum
9
chat.completion.chunk
a stream · dotted indigo
10
running to stopped
a state change · dashed amber