tegwick
23d0c2b34d
Answer the GLAS-WP-0015 handoff for SAND-WP-0015-T04 without activating any production path. Add candidate profile profile.claude-agent-dev-proof v1.1.0 (ext.bwrap, localhost-only, default: deny, declared api.anthropic.com:443) for GLAS-WP-0012 review. The committed profile grants no egress by itself — ext.bwrap refuses it unless owner extension config independently allowlists the destination — and a regression test asserts that fail-closed default. Reconcile the differing project examples in favour of the acceptance runner's actor agt / project glas-local-proof, keeping the documented credential route bound to that single project rather than broadening it. Record the return contract (profile revision, host scope, consumer tuple, runtime digest and mount paths, declared egress, value-free denial/cleanup receipts) in docs/bwrap-runtime.md. T04 stays wait: Claude credential lane, owner machine authentication, pinned Claude executable and real-model acceptance remain operator gated. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HjyScPKb8MV8y2VZHGFSSV Assistant: claude-code Assistant-Model: opus Assistant-Process: 716401@bnt-lap001 Assistant-Session: 0d02392b-d4a8-4fed-98e3-32333f768169
37 lines
898 B
YAML
37 lines
898 B
YAML
# Candidate profile for the Glas real-rein acceptance (GLAS-WP-0012 review).
|
|
# Declaring egress here does not enable it: ext.bwrap refuses this profile
|
|
# unless the owner extension config independently allowlists the destination,
|
|
# and the pinned runtime/credential route stay in owner config, never here.
|
|
# Not a production profile — SAND-WP-0015-T04 gates activation.
|
|
id: profile.claude-agent-dev-proof
|
|
version: "1.1.0"
|
|
extension: ext.bwrap
|
|
isolation:
|
|
level: process
|
|
network:
|
|
default: deny
|
|
egress:
|
|
- api.anthropic.com:443
|
|
workspace:
|
|
mode: mirror
|
|
access: rw
|
|
scope_default: session
|
|
ttl:
|
|
default: 1h
|
|
max: 4h
|
|
idle_reap: null
|
|
resources:
|
|
cpu: null
|
|
memory_mb: null
|
|
setup:
|
|
instructions: ""
|
|
secret_refs: []
|
|
placement:
|
|
prefer: [localhost]
|
|
fallback: []
|
|
reachability:
|
|
tunnel: ops-bridge
|
|
identity: ops-warden
|
|
metadata:
|
|
cost_class: self-hosted
|
|
latency_class: standard
|