{
  "allowed": [
    "python stdlib",
    "local JSON files"
  ],
  "forbidden": [
    "network calls",
    "real signing keys",
    "package installation",
    "production registry/build credentials"
  ]
}