{
  "schemaVersion": 1,
  "permissions": {
    "sandboxMode": "workspace-write",
    "approvalPolicy": "on-request",
    "approvalsReviewer": "auto-review"
  },
  "projects": {
    "~/Company/Code/reports": {
      "filesystem": {
        "read": ["../../Reference/"],
        "write": ["./output/"],
        "denyRead": [".env", "secrets/"],
        "denyWrite": ["published/"]
      },
      "reviewShell": true
    }
  }
}