  "permissions": {
    "deny": [
      "WebFetch",
      "Projects",
      "SendUserFile",
      "ShareOnboardingGuide",
      "Artifact",
      "Read(~/.ssh/**)",
      "Read(~/.aws/**)",
      "Read(~/.config/gh/**)",
      "Read(~/.npmrc)",
      "Read(~/.claude/.credentials.json)",
      "Read(~/.claude.json)",
…
    ],
    "disableBypassPermissionsMode": "disable"
  },
…
  "sandbox": {
    "enabled": true,
    "failIfUnavailable": true,
    "allowUnsandboxedCommands": false,
    "enableWeakerNestedSandbox": false,
    "enableWeakerNetworkIsolation": false,
    "filesystem": {
      "allowManagedReadPathsOnly": true,
      "denyWrite": [
        "~/.ssh",
…
    "credentials": {
      "files": [
        { "path": "~/.aws/credentials", "mode": "deny" },
        { "path": "~/.ssh", "mode": "deny" },
…
      "envVars": [
        { "name": "AWS_ACCESS_KEY_ID", "mode": "deny" },
        { "name": "AWS_SECRET_ACCESS_KEY", "mode": "deny" },
        { "name": "AWS_SESSION_TOKEN", "mode": "deny" },
        { "name": "GITHUB_TOKEN", "mode": "deny" },
…
    "network": {
      "allowManagedDomainsOnly": true,
      "allowAllUnixSockets": false,
      "allowLocalBinding": false,
      "allowedDomains": ["github.example.com", "registry.example.com"]
    }
  },

Warm-up