{
  "apiVersion": "hub.example.com/v1alpha1",
  "kind": "ConnectorTemplate",
  "metadata": {"name": "OpenCode read-only analysis broker", "slug": "opencode-readonly-default"},
  "spec": {
    "connectorType": "opencode-readonly",
    "image": "local-build://openchamber-mcp",
    "transport": "streamable-http",
    "credentialReferences": ["docker-secret://connector_identity_signing_key"],
    "allowedNetworkTargets": ["service://opencode-readonly:4096"],
    "configuration": {"readOnly": true, "agent": "plan", "workspaceMount": "read-only", "requestTimeoutSeconds": 30, "maxResponseBytes": 1048576},
    "health": {"path": "/ready", "intervalSeconds": 30, "failureThreshold": 3},
    "defaultRiskClasses": ["R0", "R1"]
  }
}