agent feedback

Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>

Author: craig-osterhout

content/manuals/ai/sandboxes/governance/org.md

@@ -197,10 +197,9 @@ Only organization rules determine what access is permitted, and local allow
 rules can't loosen those restrictions. The same applies to filesystem policies:
 local filesystem allow rules are replaced by organization rules entirely.
 
-Local deny rules are still evaluated for network access and layer on top of
-the organization policy. Developers can use `sbx policy deny` to further
-restrict network access beyond what the org policy allows, even when governance
-is active.
+Local deny rules are still evaluated and layer on top of the organization
+policy. Developers can use `sbx policy deny` to further restrict access beyond
+what the org policy allows, even when governance is active.
 
 For how a user's organization policies are evaluated together, see
 [Policy concepts](concepts.md#rule-evaluation).