{
  "id": "example-echo",
  "description": "Test profile: echoes argv, reads the injected credential only inside the child.",
  "executable": "echo-fixture",
  "injection": {"method": "env", "name": "EXAMPLE_TOKEN"},
  "allowed_subcommands": ["hello", "version"],
  "arg_regex": "^[\\w .\\-/:]+$",
  "forbidden_regex": "[;&|`$<>(){}\\[\\]\n]|(^|/)\\.\\.(/|$)",
  "target_hosts": ["example.com"],
  "timeout": 10,
  "max_output_bytes": 8192
}