---
url: 'https://adk.nht.io/api/batteries/sandbox/node/functions/mapPolicy.md'
---

# Function: mapPolicy()

```ts
function mapPolicy(
  policy: SandboxPolicy,
  runtime?: {
    enableWeakerNestedSandbox?: boolean;
  },
): SrtConfig;
```

Defined in: [src/batteries/sandbox/node/srt\_enforcer.ts:134](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/node/srt_enforcer.ts#L134)

The sole ADK-to-SRT translation point. Keep the upstream type behind this local firewall.

## Parameters

| Parameter                            | Type                                                                                    |
| ------------------------------------ | --------------------------------------------------------------------------------------- |
| `policy`                             | [`SandboxPolicy`](../../../../@nhtio/adk/batteries/sandbox/interfaces/SandboxPolicy.md) |
| `runtime`                            | { `enableWeakerNestedSandbox?`: `boolean`; }                                          |
| `runtime.enableWeakerNestedSandbox?` | `boolean`                                                                               |

## Returns

`SrtConfig`

## Remarks

`runtime` carries ADAPTER-level settings that are deliberately absent from `SandboxPolicy`. That
type is ADK-owned, SRT-neutral vocabulary — naming an SRT feature in it would make the firewall
nominal and leave a non-SRT enforcer unable to implement the contract — so an SRT-specific switch
belongs on the adapter's own options, exactly as `binShell` already does.