# Enterprise overlay: hardened defaults for institutional deployments.

# Sandbox + egress controls (CPU seconds)
ENABLE_TS_SANDBOX=true
TS_SANDBOX_MODE=auto
TS_SANDBOX_BLOCK_OUTBOUND_NETWORK=true
TS_SANDBOX_ALLOWLIST_HOSTS=https://institution-services.example.edu
TS_SANDBOX_CPU_LIMIT=20
TS_SANDBOX_MEMORY_LIMIT_MB=512
TS_SANDBOX_TIMEOUT_SEC=20

# MCP client authentication (pending feature wiring)
MCP_CLIENT_AUTH_MODE=api_key_or_mtls
MCP_CLIENT_API_KEY_REQUIRED=true
MCP_CLIENT_CERT_AUTHORITY=path/to/ca.pem

# Secrets management
TOKEN_STORAGE_BACKEND=external_vault
TOKEN_ENVELOPE_KEY_SOURCE=kms
TOKEN_STARTUP_VALIDATION=true

# Audit and access logging (pending feature wiring)
LOG_REDACT_PII=true
LOG_ACCESS_EVENTS=true
LOG_EXECUTION_EVENTS=true
LOG_RETENTION_DAYS=180
LOG_DESTINATION=syslog
SIEM_FORWARDING_ENABLED=true

# Bind settings are reserved for future HTTP transport (ignored in stdio mode).
MCP_BIND_HOST=0.0.0.0
MCP_BIND_PORT=8000

# Privacy
ENABLE_DATA_ANONYMIZATION=true
