garnet/go/src/amber/system_updater/meta/system_updater_isolated.cmx

{
    "program": {
        "binary": "bin/system_updater"
    },
    "sandbox": {
        "services": [
            "fuchsia.pkg.PackageResolver",
            "fuchsia.cobalt.LoggerFactory",
            "fuchsia.device.manager.Administrator",
            "fuchsia.logger.LogSink",
            "fuchsia.process.Launcher"
        ]
    }
}