version: 1
rules:
  - id: rule_allowed_domains
    type: allowed_domains
    enabled: true
    params:
      domains:
        - github.com
        - claude.ai
        - api.openai.com
        - chatgpt.com
        - cursor.sh

  - id: rule_allowed_operations
    type: allowed_operations
    enabled: true
    params:
      operations:
        - read
        - chat
        - search
        - code_generation
        - page_visit

  - id: rule_disallowed_tools
    type: disallowed_tools
    enabled: true
    params:
      tools:
        - eval
        - exec
        - shell
        - system
        - rm
        - sudo
        - chmod

  - id: rule_permission_change
    type: permission_change
    enabled: true
    params: {}

  - id: rule_redundant_rate
    type: redundant_rate
    enabled: true
    params:
      max_per_minute: 10

  - id: rule_task_scope
    type: task_scope
    enabled: false
    params:
      task_keywords: []