Policy specification

Policies are YAML files.

version: 1
name: strict
retry_loop_threshold: 3
rules:
  - id: no_sensitive_to_external_sink
    enabled: true
    severity: critical
  - id: no_untrusted_to_privileged_tool
    enabled: true
    severity: high
  - id: retry_loop
    enabled: true
    severity: medium

Policies may also define tool_class_overrides, expected_tools, and allowed_high_risk_tools.