{
  "_comment_path": "Installed to /etc/firefox/policies/policies.json, the documented Linux location for Firefox enterprise policy. 0600-firefox.hook.chroot also links it into firefox-esr's distribution/ directory, an older location some builds read instead; whichever the installed build honours wins and the other is ignored. Every key below lives OUTSIDE the 'policies' object on purpose — Firefox flags unrecognised keys *inside* it as invalid policies in about:policies.",

  "_comment_extensions": "Same two extensions and the same unverified-ID caveat as hosts/thin-client/configs/firefox/policies.json — see that file's comment and the touch-panel README's verification list. Duplicated, not shared, per this project's established cross-host convention (Phase 13's admin-canvas/digest-canvas SDK split).",

  "_comment_kiosk_ui": "The Disable*/UserMessaging/FirefoxHome blocks all remove a prompt, tour, or nag that would otherwise sit on an unattended panel with nobody there to dismiss it.",

  "_comment_updates": "The browser is part of the image and is replaced by rebuilding and reflashing it, so in-browser updates would only produce version drift between panels plus a restart banner nobody is there to click.",

  "policies": {
    "ExtensionSettings": {
      "uBlock0@raymondhill.net": {
        "installation_mode": "force_installed",
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi",
        "default_area": "menupanel"
      },
      "sponsorBlocker@ajay.app": {
        "installation_mode": "force_installed",
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/sponsorblock/latest.xpi",
        "default_area": "menupanel"
      }
    },

    "DisableProfileImport": true,
    "DisableProfileRefresh": true,
    "DisableFirefoxAccounts": true,
    "DisableFirefoxStudies": true,
    "DisableTelemetry": true,
    "DisablePocket": true,
    "DisableFeedbackCommands": true,
    "DisableSetDesktopBackground": true,
    "DontCheckDefaultBrowser": true,
    "NoDefaultBookmarks": true,
    "OfferToSaveLogins": false,
    "PasswordManagerEnabled": false,
    "PromptForDownloadLocation": false,

    "AppAutoUpdate": false,
    "DisableAppUpdate": true,

    "UserMessaging": {
      "WhatsNew": false,
      "ExtensionRecommendations": false,
      "FeatureRecommendations": false,
      "UrlbarInterventions": false,
      "SkipOnboarding": true,
      "MoreFromMozilla": false
    },

    "FirefoxHome": {
      "Search": true,
      "TopSites": true,
      "SponsoredTopSites": false,
      "Highlights": false,
      "Pocket": false,
      "SponsoredPocket": false,
      "Snippets": false
    },

    "OverrideFirstRunPage": "",
    "OverridePostUpdatePage": ""
  }
}