version: 1
profile: public-safe-enterprise-genai

routes:
  knowledge_assistant:
    risk_tier: low
    retrieval:
      allowed_sources: [approved-knowledge-index]
      max_classification: internal
    tools: []
    output_checks: [citations-present, pii-redaction, policy-language]

  workflow_assistant:
    risk_tier: elevated
    retrieval:
      allowed_sources: [approved-knowledge-index, user-authorized-records]
      max_classification: confidential
    tools:
      - name: create-draft
        mode: preview-only
        requires_confirmation: true
    output_checks: [schema-valid, entitlement-valid, evidence-complete]

budgets:
  requests_per_minute_per_user: 20
  concurrent_requests_per_tenant: 8
  max_context_tokens: 32000

evidence:
  retain:
    - correlation_id
    - identity_subject_hash
    - policy_version
    - retrieval_source_ids
    - model_route
    - tool_decisions
    - output_check_results
  exclude:
    - raw_access_tokens
    - unrestricted_prompt_payloads
    - secret_values