{
  "mode": "allowlist",
  "constraints": {
    "read_document": {
      "name": "read_document",
      "allowed": true
    },
    "write_file": {
      "name": "write_file",
      "allowed": false
    }
  }
}