grimoire-kit 3.4.2__tar.gz → 3.4.3__tar.gz

{grimoire_kit-3.4.2 → grimoire_kit-3.4.3}/CHANGELOG.md

@@ -7,6 +7,19 @@ et ce projet adhère au [Semantic Versioning](https://semver.org/lang/fr/).
 
 ## [Unreleased]
 
+## [3.4.3] - 2026-05-28
+
+### Ajouté
+
+- **Agentic Standard Bridge** — profils `minimal`, `orchestrated` et `governed`, génération des artefacts ISO/design-pattern, vérification/audit CLI et baseline de preuves.
+- **Provider onboarding** — détection non-secrète des providers, activation explicite via `standard init --provider/--providers`, politiques `hosted-safe`, `local-first` et `mixed`.
+- **Package npm** — publication du launcher `grimoire-kit` pour rendre le kit installable avec `npm install grimoire-kit`.
+
+### Corrigé
+
+- **Sécurité standard** — durcissement des chemins générés, rejet des `task_id` traversants, confinement des locators knowledge locaux et échappement des valeurs projet injectées dans les templates.
+- **CI/Docs** — workflow ciblé agentic standard, documentation d’extension des profils et pin explicite du bridge consommé par Forge.
+
 ## [3.4.2] - 2026-03-30
 
 ### Corrigé

{grimoire_kit-3.4.2 → grimoire_kit-3.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: grimoire-kit
-Version: 3.4.2
+Version: 3.4.3
 Summary: Composable AI agent platform — personas, memory, workflows, and quality automation for any project.
 Project-URL: Homepage, https://github.com/Guilhem-Bonnet/Grimoire-kit
 Project-URL: Repository, https://github.com/Guilhem-Bonnet/Grimoire-kit
@@ -88,6 +88,7 @@ Description-Content-Type: text/markdown
   <a href="#-architecture">Architecture</a> •
   <a href="#-features">Features</a> •
   <a href="#-outils-cli">Outils CLI</a> •
+  <a href="docs/agentic-standard-integration.md">Standard agentique</a> •
   <a href="docs/concepts.md">Concepts</a> •
   <a href="docs/getting-started.md">Guide complet</a> •
   <a href="CHANGELOG.md">Changelog</a>
@@ -155,6 +156,10 @@ pipx install grimoire-kit
 python3 -m venv .venv && source .venv/bin/activate
 pip install grimoire-kit
 
+# Ou via npm (launcher Node vers la CLI Python)
+npm install -g grimoire-kit
+grimoire --help
+
 # Initialiser un nouveau projet
 grimoire init mon-projet --archetype web-app
 
@@ -942,4 +947,3 @@ Les contributions sont les bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md)
     <img src="https://img.shields.io/github/stars/Guilhem-Bonnet/Grimoire-kit?style=social" alt="Stars">
   </a>
 </p>
-

{grimoire_kit-3.4.2 → grimoire_kit-3.4.3}/README.md

@@ -33,6 +33,7 @@
   <a href="#-architecture">Architecture</a> •
   <a href="#-features">Features</a> •
   <a href="#-outils-cli">Outils CLI</a> •
+  <a href="docs/agentic-standard-integration.md">Standard agentique</a> •
   <a href="docs/concepts.md">Concepts</a> •
   <a href="docs/getting-started.md">Guide complet</a> •
   <a href="CHANGELOG.md">Changelog</a>
@@ -100,6 +101,10 @@ pipx install grimoire-kit
 python3 -m venv .venv && source .venv/bin/activate
 pip install grimoire-kit
 
+# Ou via npm (launcher Node vers la CLI Python)
+npm install -g grimoire-kit
+grimoire --help
+
 # Initialiser un nouveau projet
 grimoire init mon-projet --archetype web-app
 
@@ -887,4 +892,3 @@ Les contributions sont les bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md)
     <img src="https://img.shields.io/github/stars/Guilhem-Bonnet/Grimoire-kit?style=social" alt="Stars">
   </a>
 </p>
-

grimoire_kit-3.4.3/archetypes/agentic-standard/archetype.dna.yaml

@@ -0,0 +1,135 @@
+$schema: "grimoire-archetype-dna/v1"
+
+id: agentic-standard
+name: "Agentic Standard"
+version: "0.1.0"
+description: "Pont installable entre un corpus normatif agentique externe et les artefacts consommables Grimoire Kit."
+icon: "⚖️"
+author: "grimoire-kit"
+tags: [standard, governance, compliance, context, knowledge, llm-provider, evidence]
+
+inherits: minimal
+
+traits:
+  - name: normative-traceability
+    description: "Chaque artefact standard-aware garde une trace vers l'exigence, le contrôle ou le pattern amont."
+    rule: "Ne pas reformuler une obligation comme source de vérité locale sans référence au corpus normatif amont. Toute conformité déclarée pointe vers mission-brief, compliance-declaration ou evidence-pack."
+    agents_affected: "*"
+  - name: evidence-gated-workflow
+    description: "Aucune livraison standard-aware sans preuve attachée."
+    rule: "Avant de déclarer une tâche terminée, produire ou mettre à jour un Evidence Pack et documenter les contrôles non applicables."
+    agents_affected: "*"
+  - name: context-orchestrated
+    description: "Le contexte n'est pas injecté en vrac : il est sélectionné, borné et justifié."
+    rule: "Pour toute tâche complexe, renseigner les sources de contexte, la raison de sélection, la fraîcheur et le budget dans le Task Envelope."
+    agents_affected: "*"
+  - name: knowledge-indexer-aware
+    description: "Les sources externes indexées sont séparées de la mémoire agentique."
+    rule: "Toute donnée externe greffée via dossier, dépôt, URL, API, MCP ou base de données doit être déclarée dans knowledge-source-registry.yaml avant usage récurrent."
+    agents_affected: "*"
+  - name: provider-neutral-routing
+    description: "Les appels LLM sont compatibles Copilot, Codex/OpenAI, Claude, Gemini et local via registre."
+    rule: "Aucun provider ou modèle non déclaré dans llm-provider-registry.yaml ne doit devenir une dépendance implicite du flow."
+    agents_affected: "*"
+
+constraints:
+  - id: no-local-norm-fork
+    description: "Ne pas forker silencieusement la norme dans un template Grimoire."
+    enforcement: hard
+    checked_by: agent-optimizer
+  - id: evidence-pack-required
+    description: "Un Evidence Pack est requis pour toute déclaration de conformité."
+    enforcement: hard
+    checked_by: agent-optimizer
+  - id: knowledge-not-memory
+    description: "La base de connaissance indexée ne doit pas être mélangée à la mémoire agentique."
+    enforcement: hard
+    checked_by: memory-keeper
+  - id: registered-provider-only
+    description: "Les providers LLM doivent être déclarés avant usage."
+    enforcement: hard
+    checked_by: agent-optimizer
+
+values:
+  - name: normative-clarity
+    description: "Séparer ce qui est obligatoire, informatif, généré et spécifique au projet."
+    priority: 1
+  - name: provider-portability
+    description: "Un flow Grimoire ne dépend pas d'un fournisseur LLM unique par accident."
+    priority: 1
+  - name: evidence-first-delivery
+    description: "La preuve de livraison fait partie du produit livré."
+    priority: 1
+
+tools_required:
+  - name: git
+    description: "Traçabilité des changements et références vers la norme amont."
+    required: true
+    check_command: "which git"
+  - name: python3
+    description: "Validation et scripts Grimoire."
+    required: false
+    check_command: "which python3"
+
+acceptance_criteria:
+  - id: mission-brief-present
+    description: "Le projet déclare son profil et son périmètre standard-aware."
+    enforcement: hard
+    context: "Template framework/agentic-standard/templates/mission-brief.md"
+    triggers_on: ["_grimoire/standard/mission-brief.md"]
+    checked_by: agent-optimizer
+  - id: task-envelope-used
+    description: "Les tâches complexes ont un état, un contexte borné et des limites d'outils."
+    enforcement: soft
+    context: "Template framework/agentic-standard/templates/task-envelope.md"
+    triggers_on: ["_grimoire-output/evidence/**/task-envelope.md"]
+    checked_by: agent-optimizer
+  - id: evidence-pack-used
+    description: "Les validations et écarts sont attachés à un Evidence Pack."
+    enforcement: hard
+    context: "Template framework/agentic-standard/templates/evidence-pack.md"
+    triggers_on: ["_grimoire-output/evidence/**/evidence-pack.md"]
+    checked_by: agent-optimizer
+  - id: knowledge-sources-declared
+    description: "Les sources documentaires externes indexées sont déclarées avec trust boundary."
+    enforcement: hard
+    context: "Knowledge Base Indexer — pas une mémoire."
+    triggers_on: ["_grimoire/standard/knowledge-source-registry.yaml"]
+    checked_by: memory-keeper
+  - id: providers-declared
+    description: "Les providers LLM utilisables sont explicitement déclarés."
+    enforcement: hard
+    context: "Provider-first routing."
+    triggers_on: ["_grimoire/standard/llm-provider-registry.yaml"]
+    checked_by: agent-optimizer
+
+agents:
+  - path: "../../archetypes/meta/agents/project-navigator.md"
+    required: true
+    description: "Atlas — cartographie du projet et des artefacts standard-aware"
+  - path: "../../archetypes/meta/agents/agent-optimizer.md"
+    required: true
+    description: "Sentinel — vérification des evidence gates et guardrails"
+  - path: "../../archetypes/meta/agents/memory-keeper.md"
+    required: true
+    description: "Mnemo — séparation mémoire / connaissance indexée"
+
+workflows: []
+shared_context_template: "../../archetypes/agentic-standard/shared-context.tpl.md"
+prompts_directory: null
+
+compatible_with: [minimal, infra-ops, web-app, fix-loop, platform-engineering, features/vector-memory, stack/go, stack/typescript, stack/python, stack/terraform, stack/k8s]
+incompatible_with: []
+requires: [minimal]
+
+auto_detect:
+  files: ["_grimoire/standard/mission-brief.md", "_grimoire/standard/compliance-declaration.md"]
+  directories: ["_grimoire/standard/", "_grimoire-output/evidence/"]
+  confidence_boost: 80
+  exclusive: false
+
+changelog:
+  - version: "0.1.0"
+    date: "2026-05-10"
+    changes:
+      - "Création du pont agentic-standard : traçabilité normative, evidence gates, Knowledge Base Indexer, registre LLM provider-neutral."

grimoire_kit-3.4.3/archetypes/agentic-standard/shared-context.tpl.md

@@ -0,0 +1,24 @@
+# Agentic Standard Shared Context
+
+This project uses the `agentic-standard` Grimoire archetype.
+
+## Source of truth
+
+- The external normative corpus defines obligations and requirement language.
+- Grimoire Kit provides generated or copied implementation artifacts.
+- Project-specific files may declare conformity, gaps, and decisions, but they do not redefine the standard.
+
+## Required distinctions
+
+- Agent memory: persistent learning about this project or agent behavior.
+- Session context: bounded information selected for the current task.
+- Knowledge base: indexed external documentation declared in `knowledge-source-registry.yaml`.
+- Source of truth: only a source explicitly marked authoritative for the current scope.
+
+## Execution rule
+
+For non-trivial tasks, use a Task Envelope before execution and an Evidence Pack before completion. If a requirement is not applicable, state why instead of silently skipping it.
+
+## LLM provider rule
+
+Use provider-first routing. The selected provider, model or capability, fallback, and data policy must be declared before becoming part of the repeatable flow.

grimoire_kit-3.4.3/framework/agentic-standard/README.md

@@ -0,0 +1,27 @@
+# Agentic Standard Bridge
+
+This directory is the Grimoire Kit bridge between an external agentic standard and concrete project artifacts.
+
+It does not define the standard itself. The normative source remains the external corpus (`processus-developpement-agentique`). Grimoire Kit only turns that corpus into installable profiles, templates, prompts, controls, and evidence structures.
+
+## Responsibilities
+
+| Layer | Role | Output in Grimoire Kit |
+|---|---|---|
+| Normative corpus | Defines obligations, controls, pattern families, profiles, and evidence expectations | Referenced as an upstream source |
+| Grimoire Forge | Selects a target profile and assembles project artifacts | Profile map, generator logic, validation flow |
+| Grimoire Kit | Provides consumable flow assets for project teams | Archetypes, templates, manifests, checks |
+
+## Files
+
+- `profile-map.yaml` maps standard capabilities to Grimoire profiles and concrete kit artifacts.
+- `templates/` contains project-facing documents generated or copied into a target project.
+- `../../archetypes/agentic-standard/` is the installable archetype for teams that want the standard-aware flow.
+
+## Design rules
+
+1. The bridge must not copy normative obligations as if Grimoire Kit were the source of truth.
+2. Every generated artifact must keep a trace to the upstream requirement, control, or pattern family it implements.
+3. External knowledge indexing is declared as a knowledge base layer, not as memory and not as session context.
+4. LLM compatibility is provider-first: provider, model, capability, data policy, and fallback must be explicit.
+5. Evidence is part of the flow, not a post-hoc report.

grimoire_kit-3.4.3/framework/agentic-standard/profile-map.yaml

@@ -0,0 +1,189 @@
+$schema: "grimoire-agentic-standard-profile-map/v1"
+
+metadata:
+  id: agentic-standard-profile-map
+  version: "0.1.0"
+  owner: grimoire-kit
+  upstream_standard:
+    name: "Standard de structure agentique"
+    repository: "processus-developpement-agentique"
+    canonical_entrypoint: "docs/norme-structure-agentique.md"
+    normative_matrix: "docs/matrice-normative-maitresse.md"
+  intent: >
+    Map an external normative corpus to concrete Grimoire Kit profiles,
+    templates, checks, and evidence packs.
+
+principles:
+  - id: standard-is-upstream
+    rule: "Grimoire Kit consumes and traces the standard; it does not redefine it."
+  - id: evidence-gated-flow
+    rule: "A task is not complete until required evidence for the selected profile exists."
+  - id: provider-neutral-llm
+    rule: "Provider/model usage is declared through a registry before execution."
+  - id: knowledge-is-not-memory
+    rule: "Indexed external documentation is a knowledge base source, not agent memory."
+  - id: context-is-orchestrated
+    rule: "Context is selected, ranked, bounded, and justified before reaching an agent."
+
+artifact_types:
+  mission_brief:
+    template: "framework/agentic-standard/templates/mission-brief.md"
+    purpose: "Declare project scope, profile, risk level, and upstream standard references."
+  task_envelope:
+    template: "framework/agentic-standard/templates/task-envelope.md"
+    purpose: "Wrap an agentic task with state, context inputs, tools, checks, and evidence gates."
+  evidence_pack:
+    template: "framework/agentic-standard/templates/evidence-pack.md"
+    purpose: "Collect proof that a task, workflow, or release satisfied its declared controls."
+  compliance_declaration:
+    template: "framework/agentic-standard/templates/compliance-declaration.md"
+    purpose: "Declare profile-level conformance with explicit gaps and accepted deviations."
+  knowledge_source_registry:
+    template: "framework/agentic-standard/templates/knowledge-source-registry.yaml"
+    purpose: "Declare external documentation sources to index and their trust boundaries."
+  llm_provider_registry:
+    template: "framework/agentic-standard/templates/llm-provider-registry.yaml"
+    purpose: "Declare LLM providers, capabilities, data policy, routing, and fallback."
+
+profiles:
+  - id: starter
+    display_name: "Starter"
+    target: "Individual or small project adopting a minimal standard-aware flow."
+    maturity: 1
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+    mapped_capabilities:
+      - workflow-state-engine
+      - evidence-gated-workflow
+      - tool-blast-radius-limiter
+    minimum_evidence:
+      - "Selected profile and task state are declared."
+      - "Tools and writable paths are bounded."
+      - "Completion includes validation evidence or an explicit non-applicability note."
+
+  - id: controlled
+    display_name: "Controlled"
+    target: "Team project requiring repeatable governance and provider-neutral LLM routing."
+    maturity: 2
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+      - llm_provider_registry
+      - compliance_declaration
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - fix-loop
+    mapped_capabilities:
+      - llm-provider-abstraction
+      - guardrail-contract
+      - mcp-trust-gate
+      - prompt-version-observability
+    minimum_evidence:
+      - "Every provider/model call is declared in the provider registry."
+      - "Guardrails define allow, deny, and escalation behavior."
+      - "Prompt, instruction, and capability changes are traceable."
+
+  - id: orchestrated
+    display_name: "Orchestrated"
+    target: "Multi-agent flow with advanced context routing and external knowledge grafting."
+    maturity: 3
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - features/vector-memory
+      - platform-engineering
+    mapped_capabilities:
+      - advanced-context-orchestrator
+      - knowledge-base-indexer
+      - memory-integrity-validator
+      - runtime-provider-contract
+      - trajectory-logging
+    minimum_evidence:
+      - "Context selections cite their source, freshness, and reason for inclusion."
+      - "Knowledge sources have indexing mode, trust level, and refresh policy."
+      - "Memory and knowledge base writes are separated."
+
+  - id: governed
+    display_name: "Governed"
+    target: "Organization-grade flow with policy, audit, and environment-aware controls."
+    maturity: 4
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - infra-ops
+      - platform-engineering
+    mapped_capabilities:
+      - policy-by-environment
+      - workspace-isolation
+      - browser-tool-contract
+      - agent-telemetry-plane
+      - session-reliability-slo-reporter
+    minimum_evidence:
+      - "Environment policy states what changes between local, CI, staging, and production."
+      - "Workspace isolation and network/tool boundaries are declared."
+      - "Telemetry and audit trails cover workflow state transitions."
+
+  - id: production
+    display_name: "Production"
+    target: "Enterprise or public critical flow with SLOs, dry-runs, cost controls, and release gates."
+    maturity: 5
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - infra-ops
+      - platform-engineering
+      - features/vector-memory
+    mapped_capabilities:
+      - kubernetes-agent-control-plane
+      - cluster-action-dry-run
+      - llm-cost-registry
+      - doc-to-graph-pipeline
+      - flow-dsl-minimal
+    minimum_evidence:
+      - "High-risk actions support dry-run and rollback proof."
+      - "Cost, latency, reliability, and quality signals are recorded for critical runs."
+      - "Release gates fail closed when mandatory evidence is missing."
+
+generation_targets:
+  project_root:
+    - path: "_grimoire/standard/mission-brief.md"
+      source_artifact: mission_brief
+    - path: "_grimoire/standard/compliance-declaration.md"
+      source_artifact: compliance_declaration
+    - path: "_grimoire/standard/knowledge-source-registry.yaml"
+      source_artifact: knowledge_source_registry
+    - path: "_grimoire/standard/llm-provider-registry.yaml"
+      source_artifact: llm_provider_registry
+  task_runtime:
+    - path: "_grimoire-output/evidence/{task-id}/task-envelope.md"
+      source_artifact: task_envelope
+    - path: "_grimoire-output/evidence/{task-id}/evidence-pack.md"
+      source_artifact: evidence_pack

grimoire_kit-3.4.3/framework/agentic-standard/templates/compliance-declaration.md

@@ -0,0 +1,41 @@
+# Agentic Compliance Declaration
+
+## Declaration
+
+- Project:
+- Declared profile: `starter | controlled | orchestrated | governed | production`
+- Standard reference:
+- Declaration owner:
+- Review cadence:
+
+## Profile coverage
+
+| Requirement or capability | Status | Evidence | Gap |
+|---|---|---|---|
+| Workflow State Engine | unknown |  |  |
+| Advanced Context Orchestrator | unknown |  |  |
+| Evidence-Gated Workflow FSM | unknown |  |  |
+| Agent Telemetry Plane | unknown |  |  |
+| Tool Blast-Radius Limiter | unknown |  |  |
+| Knowledge Base Indexer | unknown |  |  |
+| LLM Provider Abstraction | unknown |  |  |
+
+## Provider compatibility
+
+| Provider | Status | Allowed use | Data policy |
+|---|---|---|---|
+| GitHub Copilot | unknown |  |  |
+| OpenAI Codex/OpenAI | unknown |  |  |
+| Anthropic Claude | unknown |  |  |
+| Google Gemini | unknown |  |  |
+| Local/open-weight | unknown |  |  |
+
+## Non-conformities
+
+| Item | Severity | Remediation | Owner |
+|---|---|---|---|
+|  |  |  |  |
+
+## Statement
+
+This declaration describes the Grimoire Kit implementation state for a selected profile. It does not replace the upstream normative corpus.

grimoire_kit-3.4.3/framework/agentic-standard/templates/evidence-pack.md

@@ -0,0 +1,40 @@
+# Agentic Evidence Pack
+
+## Summary
+
+- Task id:
+- Profile:
+- Outcome:
+- Final state:
+
+## Evidence inventory
+
+| Evidence | Location | Produced by | Result |
+|---|---|---|---|
+|  |  |  |  |
+
+## Validation
+
+| Check | Command or method | Result | Notes |
+|---|---|---|---|
+|  |  |  |  |
+
+## Controls
+
+| Control family | Applied? | Evidence | Gap |
+|---|---:|---|---|
+| Governance | no |  |  |
+| Quality | no |  |  |
+| Runtime | no |  |  |
+| Knowledge | no |  |  |
+| Model/provider | no |  |  |
+
+## Deviations and accepted risks
+
+| Deviation | Impact | Accepted by | Review trigger |
+|---|---|---|---|
+|  |  |  |  |
+
+## Completion statement
+
+The task can be considered complete only when mandatory evidence gates for the selected profile are satisfied or explicitly marked non-applicable with justification.

grimoire_kit-3.4.3/framework/agentic-standard/templates/knowledge-source-registry.yaml

@@ -0,0 +1,37 @@
+$schema: "grimoire-knowledge-source-registry/v1"
+
+metadata:
+  project: ""
+  owner: ""
+  purpose: "External indexed knowledge base for agentic flows."
+
+rules:
+  knowledge_is_not_memory: true
+  knowledge_is_not_session_context: true
+  explicit_source_of_truth_required: true
+  stale_source_must_be_disclosed: true
+
+sources:
+  - id: ""
+    type: "folder | git_repository | url | api | mcp | database | object_storage"
+    locator: ""
+    enabled: true
+    indexing:
+      mode: "manual | scheduled | webhook | on_demand"
+      cadence: ""
+      parser: "markdown | code | openapi | generic"
+      chunking_policy: ""
+      embedding_profile: ""
+    trust:
+      level: "low | medium | high | authoritative"
+      source_of_truth: false
+      owner: ""
+      freshness_sla: ""
+    access:
+      allowed_agents: []
+      forbidden_data_classes: []
+      network_required: false
+    evidence:
+      last_indexed_at: ""
+      index_manifest: ""
+      known_gaps: []

grimoire_kit-3.4.3/framework/agentic-standard/templates/llm-provider-registry.yaml

@@ -0,0 +1,83 @@
+$schema: "grimoire-llm-provider-registry/v1"
+
+metadata:
+  project: ""
+  owner: ""
+  policy: "No provider/model call outside this registry."
+
+providers:
+  - id: "github-copilot"
+    enabled: false
+    provider_type: "hosted"
+    allowed_capabilities: ["chat", "code", "review"]
+    default_models: []
+    data_policy:
+      allowed_data_classes: []
+      forbidden_data_classes: []
+      retention_notes: ""
+    fallback_order: []
+    audit:
+      log_prompts: false
+      log_metadata: true
+
+  - id: "openai"
+    enabled: false
+    provider_type: "hosted"
+    allowed_capabilities: ["chat", "code", "reasoning", "embeddings"]
+    default_models: []
+    data_policy:
+      allowed_data_classes: []
+      forbidden_data_classes: []
+      retention_notes: ""
+    fallback_order: []
+    audit:
+      log_prompts: false
+      log_metadata: true
+
+  - id: "anthropic"
+    enabled: false
+    provider_type: "hosted"
+    allowed_capabilities: ["chat", "code", "reasoning"]
+    default_models: []
+    data_policy:
+      allowed_data_classes: []
+      forbidden_data_classes: []
+      retention_notes: ""
+    fallback_order: []
+    audit:
+      log_prompts: false
+      log_metadata: true
+
+  - id: "google-gemini"
+    enabled: false
+    provider_type: "hosted"
+    allowed_capabilities: ["chat", "code", "multimodal", "reasoning"]
+    default_models: []
+    data_policy:
+      allowed_data_classes: []
+      forbidden_data_classes: []
+      retention_notes: ""
+    fallback_order: []
+    audit:
+      log_prompts: false
+      log_metadata: true
+
+  - id: "local"
+    enabled: false
+    provider_type: "local"
+    allowed_capabilities: ["chat", "code", "embeddings"]
+    default_models: []
+    data_policy:
+      allowed_data_classes: []
+      forbidden_data_classes: []
+      retention_notes: "Local execution still requires explicit data classification."
+    fallback_order: []
+    audit:
+      log_prompts: false
+      log_metadata: true
+
+routing:
+  default_provider: ""
+  default_fallback_chain: []
+  require_capability_match: true
+  require_data_policy_match: true