@sunaiva/gate 1.1.0 → 1.1.4

package/dist/rules/rules.json

@@ -22,7 +22,7 @@
       "full-suite",
       "minimal"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "fin-002",
@@ -46,7 +46,7 @@
       "financial-protection",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "fin-003",
@@ -68,14 +68,14 @@
       "financial-protection",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "fin-004",
     "name": "Crypto Transaction Block",
     "description": "Block all cryptocurrency transfers, wallet interactions, and token purchases without explicit multi-step human approval",
     "category": "financial-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: wallet addresses, ETH/BTC/USDC transfers, DeFi interactions, NFT purchases, gas fee submissions, seed phrase usage",
@@ -91,7 +91,7 @@
       "financial-protection",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "fin-005",
@@ -112,8 +112,9 @@
       "financial-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "fin-006",
@@ -134,8 +135,9 @@
       "financial-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "fin-007",
@@ -157,8 +159,9 @@
       "full-suite",
       "developer-safety"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "fin-008",
@@ -181,7 +184,7 @@
       "full-suite",
       "minimal"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "fin-009",
@@ -203,7 +206,7 @@
       "financial-protection",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "fin-010",
@@ -225,8 +228,9 @@
       "full-suite",
       "developer-safety"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "fin-011",
@@ -247,8 +251,9 @@
       "financial-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "fin-012",
@@ -270,8 +275,9 @@
       "financial-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-001",
@@ -295,7 +301,7 @@
       "full-suite",
       "minimal"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "dat-002",
@@ -318,7 +324,7 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "dat-003",
@@ -340,8 +346,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-004",
@@ -365,7 +372,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "dat-005",
@@ -388,8 +395,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-006",
@@ -409,8 +417,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-007",
@@ -432,8 +441,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-008",
@@ -453,8 +463,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-009",
@@ -474,8 +485,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-010",
@@ -497,7 +509,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "dat-011",
@@ -517,8 +529,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "dat-012",
@@ -538,8 +551,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-001",
@@ -563,7 +577,7 @@
       "full-suite",
       "minimal"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-002",
@@ -588,7 +602,7 @@
       "full-suite",
       "minimal"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-003",
@@ -609,8 +623,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-004",
@@ -632,7 +647,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-005",
@@ -654,7 +669,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-006",
@@ -675,7 +690,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-007",
@@ -696,8 +711,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-008",
@@ -720,7 +736,7 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "gov-009",
@@ -741,8 +757,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-010",
@@ -764,8 +781,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-011",
@@ -786,8 +804,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "gov-012",
@@ -810,7 +829,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "qlt-001",
@@ -831,8 +850,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-002",
@@ -854,8 +874,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-003",
@@ -876,8 +897,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-004",
@@ -898,8 +920,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-005",
@@ -920,8 +943,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-006",
@@ -942,8 +966,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-007",
@@ -964,8 +989,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-008",
@@ -986,8 +1012,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-009",
@@ -1008,8 +1035,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-010",
@@ -1030,8 +1058,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-011",
@@ -1052,8 +1081,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "qlt-012",
@@ -1074,15 +1104,16 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "com-001",
     "name": "Email Review Gate",
     "description": "Block sending any external email drafted by an agent without human review of content, recipients, and subject line",
     "category": "communication-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: SMTP send commands, Gmail API message sends, Postmark/SendGrid single sends, nodemailer send calls with external recipients",
@@ -1097,14 +1128,14 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "com-002",
     "name": "Social Media Approval Gate",
     "description": "Block posting, publishing, or scheduling any social media content without human review and approval",
     "category": "communication-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: Twitter/X API post calls, LinkedIn share submissions, Facebook page post API, Instagram media publishes, TikTok upload completions",
@@ -1119,7 +1150,7 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "com-003",
@@ -1139,8 +1170,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "com-004",
@@ -1160,15 +1192,16 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "com-005",
     "name": "Customer Communication Gate",
     "description": "Block any direct communication to customers, clients, or partners initiated by an agent without human sign-off",
     "category": "communication-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: CRM-triggered customer emails, in-app messages sent to user segments, support ticket replies, automated refund communications, contract or invoice emails",
@@ -1183,14 +1216,14 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "com-006",
     "name": "Press Release and PR Content Gate",
     "description": "Block publishing or distributing any press release, media statement, or investor communication without executive approval",
     "category": "communication-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: PR Newswire distribution API, Business Wire submissions, media contact outreach with embargo dates, investor relations email sends",
@@ -1204,7 +1237,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "com-007",
@@ -1225,7 +1258,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "com-008",
@@ -1245,15 +1278,16 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "com-009",
     "name": "Outreach Approval Before Launch",
     "description": "Require explicit go/no-go approval before activating any cold outreach sequence or automated follow-up campaign",
     "category": "communication-safety",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: Instantly.ai campaign activation, Lemlist sequence launch, Apollo.io sequence start, Outreach.io sequence enable, HubSpot sequence activation",
@@ -1268,7 +1302,7 @@
       "essential",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "com-010",
@@ -1288,8 +1322,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "com-011",
@@ -1310,7 +1345,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "com-012",
@@ -1330,8 +1365,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-001",
@@ -1352,8 +1388,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-002",
@@ -1373,8 +1410,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-003",
@@ -1394,8 +1432,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-004",
@@ -1416,8 +1455,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-005",
@@ -1438,8 +1478,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-006",
@@ -1460,8 +1501,9 @@
       "essential",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-007",
@@ -1482,8 +1524,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-008",
@@ -1504,15 +1547,16 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-009",
     "name": "No Fabricated Statistics",
     "description": "Block agent from presenting invented numbers, market sizes, or performance statistics as factual claims",
     "category": "knowledge-protocol",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "post-action",
     "severity": "block",
     "detection_pattern": "Detects: market size claims without cited research, performance benchmarks not sourced to a test run, conversion rates stated as fact without underlying data",
@@ -1526,7 +1570,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "know-010",
@@ -1546,8 +1590,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-011",
@@ -1567,8 +1612,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "know-012",
@@ -1589,8 +1635,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-001",
@@ -1612,8 +1659,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-002",
@@ -1636,8 +1684,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-003",
@@ -1659,8 +1708,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-004",
@@ -1682,8 +1732,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-005",
@@ -1704,8 +1755,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-006",
@@ -1726,8 +1778,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-007",
@@ -1749,8 +1802,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-008",
@@ -1772,8 +1826,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-009",
@@ -1795,8 +1850,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-010",
@@ -1817,8 +1873,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-011",
@@ -1840,8 +1897,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "res-012",
@@ -1863,8 +1921,9 @@
       "resource-protection",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-001",
@@ -1887,7 +1946,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "sec-002",
@@ -1909,7 +1968,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "sec-003",
@@ -1930,8 +1989,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-004",
@@ -1953,7 +2013,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "sec-005",
@@ -1974,8 +2034,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-006",
@@ -1997,7 +2058,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "sec-007",
@@ -2018,8 +2079,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-008",
@@ -2040,8 +2102,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-009",
@@ -2063,18 +2126,18 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-010",
     "name": "No Banned Model Providers",
     "description": "Block agent from routing requests to providers on the organisation's banned list (e.g. providers with IP leakage concerns)",
     "category": "security",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
-    "detection_pattern": "Detects: API calls to Kimi, MiniMax, DeepSeek, or other banned provider endpoints; model IDs matching banned provider prefixes in routing configs",
     "example_blocked": "Agent routes a prompt containing proprietary code to a DeepSeek API endpoint to save costs",
     "example_allowed": "Agent routes all requests through approved providers (Anthropic, Google, OpenRouter with approved models only)",
     "tags": [
@@ -2086,7 +2149,19 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "premium",
+    "backend_required": true,
+    "user_configurable": true,
+    "config_schema": {
+      "banned_providers": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "description": "List of model provider substrings to block (e.g. [\"deepseek\", \"qwen\"]). Customer-supplied."
+      }
+    },
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "sec-011",
@@ -2108,7 +2183,7 @@
       "developer-safety",
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "constitutional"
   },
   {
     "id": "sec-012",
@@ -2129,8 +2204,9 @@
       "developer-safety",
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "cmp-001",
@@ -2150,15 +2226,16 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "cmp-002",
     "name": "GDPR Data Handling Protocol",
     "description": "Require explicit lawful basis documentation before any collection, processing, or storage of EU resident personal data",
     "category": "compliance",
-    "enforcement": "constitutional",
+    "enforcement": "standard",
     "gate_type": "pre-action",
     "severity": "block",
     "detection_pattern": "Detects: EU resident data stored without consent record, PII processed without documented lawful basis, data transferred outside EU/EEA without Standard Contractual Clauses",
@@ -2172,7 +2249,7 @@
     "preset_groups": [
       "full-suite"
     ],
-    "backend_required": false
+    "tier": "recommended_default"
   },
   {
     "id": "cmp-003",
@@ -2192,8 +2269,9 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   },
   {
     "id": "cmp-004",
@@ -2213,7 +2291,8 @@
     "preset_groups": [
       "full-suite"
     ],
-    "detection_pattern": "[server-side]",
-    "backend_required": true
+    "backend_required": true,
+    "tier": "premium",
+    "detection_pattern": "[server-side]"
   }
 ]