# DSH Supreme v1.1 — STANDARD composition fragment (bundle users).
#
# Recomposes the seven bundle rows to the STANDARD composition (Spec §16):
# policy + observability + memory-policy + verifier. Router/benchmark/workflow
# stay out (disabled), and PAID/TRIAL remains denied by the policy default.
#
# Patch semantics (vendor/include applyEntryPatches, the exact algorithm boot
# uses): rows here are UPDATE patches — they target rows the bundle layer
# inserted by `id`, replacing each row's whole `config` and/or setting
# `disabled`. They intentionally carry NO `name`: an update patch's name must
# match the installed row's resolved name verbatim, which is
# install-location-dependent, so restating it here would be skipped.
#
# Apply with ONE of:
#   1. overlay (no file edits):
#      dsh --profile <name> --patch "$DSH_HOME/profiles/<name>/node_modules/dsh-supreme/config/compositions/standard.patch.yml"
#   2. copy the rows below into your profile's cordis.patch.yml (last write
#      wins per row id).
#
# Paths are RELATIVE to the dsh process working directory. Override any row
# from your own patch layer — user layers always win.
#
# v1.3 ASTRA-hardening posture (production-conservative): both new policy
# layers run in AUDIT/scan-only mode — nothing here can block a call.
#   - enableEncodingScan: true → long base64/hex runs in tool arguments are
#     audited as `encoding_blob` (class name + argument name + run length;
#     values are never echoed).
#   - capabilityClassGate: AUDIT → requests carrying a `capabilityClass` label
#     outside sanctionedCapabilityClasses (empty here) are audited, not denied.
# The remaining v1.3 keys (cotVisibilityProfiles, riskGatedCoT,
# denyCircumventionGuard) keep their bundle defaults; the workflow/router/
# benchmark v1.3 keys live in the supreme/lab fragments where those plugins
# are active.
#
# v1.3.1 review-hardening (production-conservative; see
# docs/REVIEW-FIXES-v1.3.1.md): STANDARD keeps only memory-policy + verifier
# active, so the only new key surfaced here is the memory isolation cap —
# pinned at its documented default. The router v1.3.1 keys (bounds/fastPath/
# outcomeCircuit/classAware, plus the structural pre-dispatch cost gate), the
# benchmark checkpoint keys, and the A2A comms registry live in the
# supreme/lab fragments where those plugins are active.

- id: supreme-policy
  config:
    executionClass: STANDARD
    # v1.3: audit-only ASTRA posture (see block above).
    enableEncodingScan: true
    capabilityClassGate: AUDIT

- id: supreme-observability
  config:
    dataDir: '.supreme-data/observability'

- id: supreme-benchmark
  disabled: true

- id: supreme-router
  disabled: true

- id: supreme-verifier
  config:
    allowedRoots:
      - '.supreme-data'

- id: supreme-memory-policy
  config:
    registerPromptSection: false
    # v1.3.1 (FIX-C): (session, task)-owned selection LRU — no cross-session
    # fallback, unknown identity renders nothing. Floor 8; 128 is the default.
    selectionStoreCap: 128
    projectKnowledge:
      - id: project-overview
        text: 'DSH Supreme v1: seven host-side policy plugins composed on DeepSeek Harness.'
        priority: 60

- id: supreme-workflow-policy
  disabled: true