Which settings in .vscode/settings.json are restricted by Workspace Trust?

Visual Studio Code utilizes a hierarchical settings system where .vscode/settings.json allows project-specific configurations to be committed to version control. However, the Workspace Trust feature introduces a security layer that can disable specific extensions or settings if the environment is not explicitly marked as trusted.

When transitioning a project from a local development environment to a restricted production-like environment, certain automation or path-based settings may fail to execute despite being correctly defined in the workspace configuration.

Does Workspace Trust globally disable all extension-specific settings, or is there a granular list of restricted settings? Which specific categories of configuration are ignored when a workspace is in an untrusted state?