# Candidate profile for the Glas real-rein acceptance (GLAS-WP-0012 review).
# Declaring egress here does not enable it: ext.bwrap refuses this profile
# unless the owner extension config independently allowlists the destination,
# and the pinned runtime/credential route stay in owner config, never here.
# Not a production profile — SAND-WP-0015-T04 gates activation.
id: profile.claude-agent-dev-proof
version: "1.1.0"
extension: ext.bwrap
isolation:
  level: process
network:
  default: deny
  egress:
    - api.anthropic.com:443
workspace:
  mode: mirror
  access: rw
scope_default: session
ttl:
  default: 1h
  max: 4h
  idle_reap: null
resources:
  cpu: null
  memory_mb: null
setup:
  instructions: ""
  secret_refs: []
placement:
  prefer: [localhost]
  fallback: []
reachability:
  tunnel: ops-bridge
  identity: ops-warden
metadata:
  cost_class: self-hosted
  latency_class: standard