# Generated by `assay sandbox --profile`
api_version: 1
extends:
- pack:deny-all
- pack:mcp-server-minimal
fs:
allow:
- "./data/input.txt"
deny:
net:
allow:
deny:
- "*:*"
env:
allow:
- "FOO_FEATURE"
processes:
allow:
- "/usr/bin/cat"
meta:
counters:
"sandbox.audit_fallback": 1
"sandbox.env_strict_used": 1
notes:
- "audit_fallback: landlock policy conflict"