{
  "permissions": {
    "allow": [
      "Bash(ls:*)",
      "Bash(hg status:*)",
      "Bash(hg:*)",
      "Bash(sqlite3:*)",
      "Bash(bazel build:*)"
    ]
  }
}