38 lines
898 B
YAML
38 lines
898 B
YAML
|
# Candidate profile for the Glas real-rein acceptance (GLAS-WP-0012 review).
|
||
|
|
# Declaring egress here does not enable it: ext.bwrap refuses this profile
|
||
|
|
# unless the owner extension config independently allowlists the destination,
|
||
|
|
# and the pinned runtime/credential route stay in owner config, never here.
|
||
|
|
# Not a production profile — SAND-WP-0015-T04 gates activation.
|
||
|
|
id: profile.claude-agent-dev-proof
|
||
|
|
version: "1.1.0"
|
||
|
|
extension: ext.bwrap
|
||
|
|
isolation:
|
||
|
|
level: process
|
||
|
|
network:
|
||
|
|
default: deny
|
||
|
|
egress:
|
||
|
|
- api.anthropic.com:443
|
||
|
|
workspace:
|
||
|
|
mode: mirror
|
||
|
|
access: rw
|
||
|
|
scope_default: session
|
||
|
|
ttl:
|
||
|
|
default: 1h
|
||
|
|
max: 4h
|
||
|
|
idle_reap: null
|
||
|
|
resources:
|
||
|
|
cpu: null
|
||
|
|
memory_mb: null
|
||
|
|
setup:
|
||
|
|
instructions: ""
|
||
|
|
secret_refs: []
|
||
|
|
placement:
|
||
|
|
prefer: [localhost]
|
||
|
|
fallback: []
|
||
|
|
reachability:
|
||
|
|
tunnel: ops-bridge
|
||
|
|
identity: ops-warden
|
||
|
|
metadata:
|
||
|
|
cost_class: self-hosted
|
||
|
|
latency_class: standard
|