sandbox_mode = "workspace-write"
approval_policy = "never"

[sandbox_workspace_write]
network_access = true