kind: context
name: cp-harness
version: 1
description: "Agent CP harness - provides CP token auth via tmpfs mount and prompt-injection defence"
provides: [agent-cp-harness]
env: {}
secrets_files:
  - source: ./cp-token.sops.env
    target: /run/secrets/cp-token
    encrypted: true
    tmpfs: true
    mode: "0400"