id: harness.agent-dev-local
version: "1.0.0"
contract_version: "1.0"
status: enabled
operational_readiness:
  status: blocked
  reason: in-sandbox rein runtime, governed credential delivery, and explicit provider egress are not yet verified
  owner: sand-boxer
  evidence_ref: GLAS-IN-0002
rein:
  id: rein-aharness
  required_capabilities:
    session_style: unattended
    model_class: frontier
sandbox_profile: profile.bwrap-local
tool_profile: green-commit-only
model:
  provider: anthropic
  model: claude-sonnet-4-6
  model_class: frontier
  route: claude-code-cli
limits:
  budget_tokens: 60000
  timeout_seconds: 900
credential_route_refs: []
metadata:
  latency_class: fast
  stream_tool_events: true
  # Pairs with sand-boxer's profile.bwrap-local (ext.bwrap, same-host,
  # no SSH hop) — for CI/local dev where the compose-ssh remote-host
  # round trip is unnecessary overhead.