Thanks, Wanda. I am looking at --help. The default assignment is in this line:
  --pins-io SET             bind the applet I/O lines 'io' to pins SET (default: 2, 4, 3, 0)

I think I can deduce from this that "clockwise" starts at VCC, so the default pin-io set is:
COPI, CIPO, WP#, HOLD#