{
  "_comment": "Example Chrome / Edge / Brave enterprise policy for force-installing the self-hosted Bolt extension. The ExtensionSettings block is the modern, preferred mechanism (it supports per-extension install_sources + override_update_url). ExtensionInstallForcelist is shown as the simpler legacy equivalent. Use ONE of them, not both, for the same extension. Replace INTERNAL-HOST with your internal HTTPS host. JSON does not support comments; the underscore-prefixed keys are documentation only and MUST be removed before deploying to platforms that validate the schema strictly.",

  "ExtensionSettings": {
    "gienjniafokikboelkbbnnjbgjnejaom": {
      "_comment": "Stable Bolt extension ID. installation_mode 'force_installed' = silently installed, cannot be removed or disabled by the user.",
      "installation_mode": "force_installed",
      "update_url": "https://INTERNAL-HOST/bolt-extension/update-manifest.xml",
      "override_update_url": true,
      "_comment_install_sources": "install_sources whitelists the host the .crx + update manifest are served from, so off-store installs from your internal host are allowed.",
      "install_sources": [
        "https://INTERNAL-HOST/*"
      ],
      "toolbar_pin": "force_pinned"
    }
  },

  "_comment_legacy": "Legacy alternative to the ExtensionSettings block above. Each entry is '<extension-id>;<update-manifest-url>'.",
  "ExtensionInstallForcelist": [
    "gienjniafokikboelkbbnnjbgjnejaom;https://INTERNAL-HOST/bolt-extension/update-manifest.xml"
  ],

  "_comment_install_sources_legacy": "Required alongside ExtensionInstallForcelist when serving off-store from your own host.",
  "ExtensionInstallSources": [
    "https://INTERNAL-HOST/*"
  ]
}