Update from code changes: refresh SmolVM sandbox network controls

[mintlify]

Summary

Refreshes smolvm/features/network-controls.mdx to reflect the enforced sandbox network policies now shipping on Firecracker and QEMU.

Changes

• Lead with the outcome ("cut off internet, or allow only specific IPv4 destinations") before backend detail.
• Add a copy-pasteable InternetSettings declaration and a consolidated platform-coverage matrix (Firecracker Linux + vsock; QEMU slirp off on macOS/Linux; QEMU TAP off/restricted on Linux).
• Expand the validation section to name the rejected inputs (unknown fields, unsupported options, restricted without allowed_cidrs, IPv6/sandbox/link-local ranges, mixing mode with allowed_domains, bridged networking, macOS/Windows guests) and the up-front ValidationError.
• Add an "Interactions with other features" section covering shared folders, exposed ports, SSH command channel, bridged networking, and legacy allowed_domains.
• Add a "Policy lifetime" section clarifying that policy is preserved across start, network repair, restart, reconnect, and supported snapshot restore, and that policy changes apply only to newly created sandboxes.

Context

Source PRs: CelestoAI/SmolVM#496, CelestoAI/SmolVM#501, CelestoAI/SmolVM#498.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
CelestoAI	🟢 Ready	View Preview	Sep 11, 2026, 8:12 AM