version: 1
description: Strict input protection with useful, redacted output
privacy:
  enabled: true
  input: block
  output: redact
signatures_enabled: true
max_input_bytes: 16384
max_output_bytes: 16384
semantic:
  provider: disabled
  model: qwen3:4b
  threshold: 0.7
  timeout_ms: 10000
  scan_output: true
tools:
  text.uppercase:
    roles:
    - analyst
    timeout_ms: 5000
models:
  qwen3:4b:
    roles:
    - analyst
    - operator
    max_output_tokens: 256
    timeout_ms: 30000
    cost_microusd: 0
budgets:
  analyst:
    calls: 20
    tokens: 1000000
    cost_microusd: 10000
    compute_ms: 180000
    concurrent: 4
  operator:
    calls: 30
    tokens: 2000000
    cost_microusd: 20000
    compute_ms: 300000
    concurrent: 4
text_rules:
- id: forbidden-word
  operator: contains
  value: forbidden
  direction: input
  target: tool
  case_sensitive: false