{ "permissions": { "allow": ["WebFetch(domain:good.com)", "Agent(model:sonnet)"], "deny": [] } }