{
  "//": "Firefox enterprise deployment for the Bolt extension. Deploy via the Firefox policies.json mechanism (place at <Firefox>/distribution/policies.json, or push through your MDM / Group Policy ADMX). ExtensionSettings force-installs the add-on; the 3rdparty.Extensions block is what browser.storage.managed.get() reads inside the extension - the SAME keys as managed_schema.json / managed-storage-example.json (Chrome), so the AI-DLP paste-guard, input-guard and page-capture honor admin policy on Firefox exactly as on Chrome/Edge. Extension id must match browser_specific_settings.gecko.id (bolt@sparcle.app). install_url MUST point at the SIGNED .xpi (Mozilla unlisted channel, free, no public listing), NOT the unsigned .zip: release Firefox refuses unsigned add-ons with enterprise policy unable to override it. Pointing at the .zip fails silently at install time.",
  "policies": {
    "ExtensionSettings": {
      "bolt@sparcle.app": {
        "installation_mode": "force_installed",
        "install_url": "https://INTERNAL-HOST/downloads/bolt-extension-firefox.xpi",
        "updates_disabled": false
      }
    },
    "3rdparty": {
      "Extensions": {
        "bolt@sparcle.app": {
          "boltUrl": "https://bolt.example-corp.com",
          "launchMode": "sidebar",
          "searchTarget": "auto",
          "liveSuggestions": true,
          "newTabEnabled": false,
          "profileLabel": "Example Corp (Managed)",
          "dlpEnabled": true,
          "dlpMode": "warn",
          "riskySites": ["chat.openai.com", "chatgpt.com", "claude.ai", "gemini.google.com", "copilot.microsoft.com", "perplexity.ai"],
          "inputGuardEnabled": true,
          "inputGuardMode": "ai-sites",
          "pageCaptureEnabled": false
        }
      }
    }
  }
}