sand-boxer/profiles/profile.build.yaml
tegwick 55398d7aa1
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Name snuggles-inventor as the code-generation owner.
Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
2026-09-24 09:56:40 +02:00

35 lines
No EOL
713 B
YAML

id: profile.build
version: "1.0.0"
extension: ext.vm-packer
isolation:
level: microvm
network:
default: deny
egress: []
workspace:
mode: remote-canonical
access: rw
scope_default: agent
ttl:
default: 8h
max: 24h
idle_reap: null
resources:
cpu: null
memory_mb: null
setup:
instructions: >
Build sandbox for snuggles-inventor. Attach to pre-built VM via ops-bridge
tunnel (e.g. haskell-build). Secret refs resolved at provision boundary only.
secret_refs:
- build-registry-token
placement:
prefer: [localhost]
fallback: [workstation]
reachability:
tunnel: ops-bridge
identity: ops-warden
metadata:
cost_class: self-hosted
latency_class: standard
observability: none