diff --git a/config-example.toml b/config-example.toml
new file mode 100644
index 0000000..35ab858
--- /dev/null
+++ b/config-example.toml
@@ -0,0 +1,18 @@
+whitelist = true
+ro = [
+    "~/.local/share/claude-code",
+    "~/.local/share/codex-cli",
+    "~/.config/AGENTS.md",
+    "/etc/alsa",
+    "/run/user/1000/pulse",
+    "/run/user/1000/pipewire-0",
+]
+rw = [
+    "~/.config/claude",
+    "~/.cargo",
+    "~/.rustup",
+]
+entrypoint = ["claude", "--dangerously-skip-permissions"]
+
+[profile.blacklist]
+blacklist = true