allowed_agent_kinds:  [claude, codex]
allowed_skills:       ["@corp/code-review", "@corp/release"]
allowed_mcp_servers:  [gitlab, jira, filesystem]
forbidden_mcp_commands: ["curl http://"]
allowed_providers:
  - name: corp-gateway
    base_url: https://llm.corp.example/v1
    models: [claude-sonnet-4-6, gpt-4o]
deny_external_skills: true