nordisk/heimdall
fuzz/seeds/policy_file/example.toml
# Heimdall job policy (format version 1). Heimdall is a defensive sandbox:
# this file can only narrow what a job may do. See docs/POLICY.md.
version = 1
[job]
kind = "wasm"
[limits]
fuel = 2_000_000_000 # wasm fuel the guest may burn
wall_time_ms = 10_000 # wall clock, epoch interruption
memory_bytes = 134_217_728 # 128 MiB linear memory
table_elements = 10_000
instances = 10
tables = 4
memories = 1
stack_bytes = 1_048_576 # 1 MiB wasm stack
max_input_bytes = 67_108_864 # 64 MiB input file
max_output_files = 16
max_output_file_bytes = 16_777_216 # 16 MiB per file
max_output_total_bytes = 67_108_864 # 64 MiB together