id: profile.e2b-burst
version: "1.0.0"
extension: ext.e2b
isolation:
  level: microvm
network:
  default: deny
  egress: []
workspace:
  mode: remote-canonical
  access: rw
scope_default: session
ttl:
  default: 2h
  max: 8h
  idle_reap: null
resources:
  cpu: null
  memory_mb: null
setup:
  instructions: "E2B burst sandbox — requires E2B_API_KEY."
  secret_refs: [e2b-api-key]
placement:
  prefer: []
  fallback: []
reachability:
  tunnel: ops-bridge
  identity: ops-warden
metadata:
  cost_class: saas-metered
  latency_class: low
  observability: none