Add harness.agent-dev-local 1.1.0 metered-owner candidate (GLAS-WP-0012-T03)

Unverified bounded-proof profile for rein-aharness metered-once: bwrap-local
with empty egress, no credential routes, 900 s / 60k tokens, 30 turns and a
USD 5.00 native cap matching the accepted spend envelope. 1.0.0 stays
blocked; unpinned selection becomes ambiguous. 134 tests pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9

profiles/harness.agent-dev-local-1.1.0.yaml

@@ -0,0 +1,35 @@
+id: harness.agent-dev-local
+version: "1.1.0"
+contract_version: "1.0"
+status: enabled
+operational_readiness:
+  status: unverified
+  reason: bounded GLAS-WP-0012-T04 proof candidate; no positive real-run evidence yet
+  owner: glas-harness
+  evidence_ref: GLAS-WP-0012-T03
+rein:
+  id: rein-aharness
+  required_capabilities:
+    session_style: unattended
+    model_class: frontier
+sandbox_profile: profile.bwrap-local
+tool_profile: green-commit-only
+model:
+  provider: anthropic
+  model: claude-sonnet-4-6
+  model_class: frontier
+  route: claude-code-cli
+limits:
+  budget_tokens: 60000
+  timeout_seconds: 900
+  max_turns: 30
+  max_budget_usd: 5.0
+credential_route_refs: []
+metadata:
+  latency_class: fast
+  stream_tool_events: true
+  # Candidate for the metered one-cycle owner (rein-aharness metered-once).
+  # The provider key stays with MessagesOwner outside bwrap; the workload gets
+  # only an owner-socket route, so the sandbox keeps empty egress and no
+  # credential route refs. max_budget_usd matches the accepted spend envelope
+  # hfact-glas-anthropic-2026-09 (infd-20260921-b01). Rollback: pin 1.0.0.