Type Alias: UrlPolicyMode

UrlPolicyMode = "unrestricted" | "allowlist"

Which URLs the tools may reach. "allowlist" permits only the configured entries; "unrestricted" names the permissive mode explicitly, so an unrestricted deployment is a stated choice visible in the boot log rather than an empty list nobody noticed.