id: profile.burst-sandbox
version: "1.0.0"
extension: ext.compose-ssh
route:
  strategy: prefer-self-hosted
  extensions:
    - ext.compose-ssh
    - ext.saas-stub
  max_cost_per_hour_usd: 1.0
isolation:
  level: container
network:
  default: deny
  egress: []
workspace:
  mode: remote-canonical
  access: rw
scope_default: session
ttl:
  default: 2h
  max: 8h
  idle_reap: null
resources:
  cpu: null
  memory_mb: null
setup:
  instructions: >
    Prefer self-hosted compose on SANDBOXER_HOST; falls back to metered SaaS stub
    when host is unavailable or SANDBOXER_FORCE_SAAS=1.
  secret_refs: []
placement:
  prefer: [sandboxer01]
  fallback: [coulombcore]
reachability:
  tunnel: ops-bridge
  identity: ops-warden
metadata:
  cost_class: saas-metered
  latency_class: standard
  observability: none