diff --git a/a2a.yaml b/a2a.yaml
index fa21908..c24cd99 100644
--- a/a2a.yaml
+++ b/a2a.yaml
@@ -1,20 +1,18 @@
-# Project identity for `a2a deploy`. Most metadata (resources, scopes,
-# secrets, workspace, etc.) lives on the Python class — this file only
-# tells the CLI how to find it.
 name: agent-compliance-auditor
 version: 0.1.0
 entrypoint: agent:AgentComplianceAuditor
 expose:
-  public: true
-# Optional platform resources:
-# resources:
-#   memory:
-#     tiers: [kv, vector]
-#     namespace: agent-compliance-auditor
-#   databases:
-#     - name: app
-#       provider: neon
-#       engine: postgres
-#       env:
-#         url: DATABASE_URL
-
+  public: false
+runtime:
+  resources:
+    cpu: "500m"
+    memory: 512Mi
+    max_runtime_seconds: 900
+  egress:
+    allow_hosts:
+      - gitea.a2a.svc.cluster.local
+      - argocd-server.argocd.svc.cluster.local
+      - kubernetes.default.svc
+      - registry-1.docker.io
+      - ghcr.io
+    deny_internet_by_default: true