sandbox_mode = "workspace-write"

[sandbox_workspace_write]
network_access = true