{
  "schemaVersion": 1,
  "enrollment": true,
  "permissions": {
    "network": {
      "allow": ["registry.npmjs.org"],
      "ports": [443]
    }
  },
  "features": {
    "allow": ["glean", "terminal"]
  },
  "settings": {
    "core.authority.requirements": {
      "allowedSandboxModes": ["read-only", "workspace-write"],
      "allowedApprovalPolicies": ["untrusted", "on-request"],
      "allowedApprovalsReviewers": ["user", "auto-review"],
      "rules": {
        "prefixRules": [
          {
            "pattern": ["git", "push"],
            "decision": "forbidden",
            "justification": "Don't push from managed workstations."
          }
        ]
      },
      "permissions": {
        "filesystem": {
          "denyRead": ["~/Company/Code/credentials"]
        }
      }
    }
  }
}