{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "ConnectorTemplate",
  "metadata": {"name": "OpenCode governed job broker", "slug": "opencode-default"},
  "spec": {
    "connectorType": "opencode",
    "image": "local-build://openchamber-mcp",
    "transport": "streamable-http",
    "credentialReferences": ["docker-secret://connector_identity_signing_key"],
    "allowedNetworkTargets": ["service://opencode:4096"],
    "configuration": {"readOnly": false, "writeMode": "preview-token-first", "requestTimeoutSeconds": 30, "maxResponseBytes": 1048576},
    "health": {"path": "/ready", "intervalSeconds": 30, "failureThreshold": 3},
    "defaultRiskClasses": ["R0", "R1", "R2"]
  }
}