{
  "agent": {
    "name": "research-helper",
    "tools": [
      {
        "name": "shell-exec",
        "permissions": ["workspace:read"],
        "requires_approval": true,
        "allow_network": true,
        "allowed_hosts": ["packages.example.invalid"]
      }
    ]
  }
}