{
  "schemaVersion": 1,
  "enrollment": true,
  "features": {
    "deny": ["computer-use", "browser-use"]
  },
  "settings": {
    "core.authority.requirements": {
      "allowedApprovalPolicies": ["untrusted", "on-request"]
    }
  }
}