Ship an example config file

config-example.toml

@@ -0,0 +1,18 @@
+whitelist = true
+ro = [
+    "~/.local/share/claude-code",
+    "~/.local/share/codex-cli",
+    "~/.config/AGENTS.md",
+    "/etc/alsa",
+    "/run/user/1000/pulse",
+    "/run/user/1000/pipewire-0",
+]
+rw = [
+    "~/.config/claude",
+    "~/.cargo",
+    "~/.rustup",
+]
+entrypoint = ["claude", "--dangerously-skip-permissions"]
+
+[profile.blacklist]
+blacklist = true