# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

version: 1

filesystem_policy:
  include_workdir: true
  read_only:
    - /usr
    - /lib
    - /proc
    - /etc
  read_write:
    - /sandbox
    - /tmp

process:
  run_as_user: sandbox
  run_as_group: sandbox

network_policies:
  github_readonly:
    name: github_readonly
    endpoints:
      - host: api.github.com
        port: 443
        protocol: rest
        enforcement: enforce
        access: read-only
      - host: github.com
        port: 443
        # No protocol field — L4 only! Git wire protocol passes through.
    binaries:
      - { path: /usr/local/bin/claude }
      - { path: /usr/bin/git }
      - { path: /usr/bin/curl }