id: profile.modal-gpu
version: "1.0.0"
extension: ext.modal
isolation:
  level: policy
network:
  default: deny
  egress: []
workspace:
  mode: remote-canonical
  access: rw
scope_default: session
ttl:
  default: 2h
  max: 8h
  idle_reap: null
resources:
  cpu: null
  memory_mb: null
setup:
  instructions: "Modal GPU/burst sandbox — requires MODAL_TOKEN_ID."
  secret_refs: [modal-token-id]
placement:
  prefer: []
  fallback: []
reachability:
  tunnel: ops-bridge
  identity: ops-warden
metadata:
  cost_class: saas-metered
  latency_class: low
  observability: none