{
  "sandbox": {
    "network": true,
    "capabilities": [],
    "read_only": [
      "/usr",
      "/bin",
      "/sbin",
      "/lib",
      "/lib64",
      "/etc/resolv.conf",
      "/etc/hosts",
      "/etc/nsswitch.conf",
      "/etc/ssl/certs"
    ],
    "read_write": ["$$releases$$/staged"],
    "homes": [
      "/root/.codex"
    ]
  },
  "limits": {
    "wall": "4h",
    "cpu": 3600,
    "processes": 1024,
    "files": "256M"
  }
}