security:
  trust_remote_code: false
  prefer_safetensors: true
  require_exact_revision_for_approval: true
  require_artifact_digest: true
  inference_network_egress: false
  expose_runtime_workers: false

lifecycle:
  automatic_production_promotion: false
  require_local_benchmark_for_stable: true
  retain_previous_stable_as_rollback_target: true
  destructive_cleanup_requires_explicit_approval: true

scheduler:
  priority_order: [production, interactive, background, benchmark, maintenance]
  reserve_vram_mb: 1024
  default_warm_ttl_seconds: 900
  benchmark_may_disrupt_production: false

upgrades:
  default_behavioral_change_class: behavioral
  vector_producer_default_change_class: requires_reindex
  schema_change_requires_contract_version_bump: true