Create config/agent-policy.yml

config/agent-policy.yml

@@ -0,0 +1,71 @@
+# CHAINSTATE external-agent policy
+
+# Documentation/configuration only unless explicitly loaded by the runtime.
+
+mode: fail-closed
+authority_model: cognition_is_not_authority
+
+capabilities:
+READ:
+default: allow
+side_effects: false
+
+QUERY:
+default: allow
+side_effects: false
+
+ANALYZE:
+default: allow
+side_effects: false
+
+SIMULATE:
+default: allow
+side_effects: false
+authoritative: false
+
+PRECHECK:
+default: allow
+side_effects: false
+authoritative: false
+
+WRITE:
+default: deny
+side_effects: true
+requires_explicit_authorization: true
+
+ANCHOR:
+default: deny
+side_effects: true
+requires_explicit_authorization: true
+
+ACTUATE:
+default: deny
+side_effects: true
+requires_dedicated_control_plane: true
+
+CREDENTIAL_ACCESS:
+default: deny
+side_effects: true
+
+SAFETY_BYPASS:
+default: deny
+side_effects: true
+
+SOVEREIGN_OVERRIDE:
+default: deny
+side_effects: true
+
+safety:
+unknown_capability: deny
+unknown_deployment: deny
+veto_is_terminal: true
+pass_is_not_authority: true
+simulation_is_non_authoritative: true
+prediction_is_not_fact: true
+tool_output_is_untrusted_data: true
+public_space_is_not_a_physical_control_plane: true
+
+secrets:
+never_return: true
+never_log: true
+never_request_from_chainstate: true