# Governance Profiles
# Defines strictness levels for different project contexts.
# The activation planner selects a profile based on project classification.

schema_version: "1.0"
last_updated: "2026-03-06"

profiles:

  - profile_id: lightweight
    display_name: Lightweight
    strictness: low
    description: >
      Minimal governance for personal projects, prototypes, experiments.
      Fast iteration, minimal ceremony.
    suitable_for:
      - hobby
      - prototype
      - experiment
      - personal
    governance_features:
      pre_code_gate: false
      model_handoff: false
      authoritative_doc_loading: optional
      session_checkpoints: optional
      change_control: false
      audit_trail: false
      preflight_resolver: false
      new_skill_gate: advisory
      rag_governance: false
      agentic_governance: false
      alignment_governance: false
      execution_logging: optional
      feedback_capture: optional
      refinement_analysis: false
    required_skills:
      - session-start
      - session-end
      - bug-hunter
      - feature-builder
    optional_skills:
      - code-review
      - dependency-audit
      - refactor-agent
      - project-manager
    excluded_skills: []
    required_rules: []
    session_policy: lightweight
    model_routing_profile: single-model

  - profile_id: standard
    display_name: Standard
    strictness: medium
    description: >
      Balanced governance for production projects and startups.
      Pre-code gate active, model routing advisory, preflight enabled.
    suitable_for:
      - startup
      - production
      - side-project-serious
      - team
    governance_features:
      pre_code_gate: true
      model_handoff: advisory
      authoritative_doc_loading: required
      session_checkpoints: required
      change_control: true
      audit_trail: false
      preflight_resolver: true
      new_skill_gate: enforced
      rag_governance: false
      agentic_governance: basic
      alignment_governance: false
      execution_logging: required
      feedback_capture: required
      refinement_analysis: false
    required_skills:
      - governance-enforcement
      - session-start
      - session-end
      - security-audit
      - code-review
      - pre-deploy-check
      - bug-hunter
      - feature-builder
    optional_skills:
      - api-contract-check
      - dependency-audit
      - performance-audit
      - db-migration-agent
      - refactor-agent
      - changelog-generator
      - api-docs-generator
      - accessibility-audit
      - project-manager
      - skill-learner
    excluded_skills: []
    required_rules:
      - authoritative-governance-mandatory
    session_policy: standard
    model_routing_profile: default

  - profile_id: enterprise
    display_name: Enterprise
    strictness: high
    description: >
      Full governance for enterprise, regulated, and high-risk projects.
      All gates active. Model handoff mandatory. Audit trail required.
    suitable_for:
      - enterprise
      - regulated
      - financial
      - healthcare
      - multi-tenant
      - compliance-required
    governance_features:
      pre_code_gate: true
      model_handoff: mandatory
      authoritative_doc_loading: required
      session_checkpoints: required
      change_control: true
      audit_trail: true
      preflight_resolver: true
      new_skill_gate: enforced
      rag_governance: required
      agentic_governance: required
      alignment_governance: false
      execution_logging: required
      feedback_capture: required
      refinement_analysis: on_demand
    required_skills:
      - governance-enforcement
      - infrastructure-setup
      - session-start
      - session-end
      - security-audit
      - code-review
      - api-contract-check
      - dependency-audit
      - pre-deploy-check
      - full-stack-audit
      - bug-hunter
      - feature-builder
      - db-migration-agent
      - refactor-agent
      - changelog-generator
      - test-orchestrator
      - rag-audit
      - agentic-audit
      - project-manager
    optional_skills:
      - performance-audit
      - accessibility-audit
      - api-docs-generator
      - ip-opportunity-agent
      - uat-workflow-crawler
      - browser-agent
      - issue-triage
      - db-explorer
      - payment-dashboard
      - alignment-audit
      - skill-learner
    excluded_skills: []
    required_rules:
      - authoritative-governance-mandatory
      - model-governance
    session_policy: enterprise
    model_routing_profile: default

  - profile_id: maximum
    display_name: Maximum
    strictness: maximum
    description: >
      All skills and rules active. All gates enforced.
      For critical systems or initial baseline application.
    suitable_for:
      - critical-infrastructure
      - baseline-application
    governance_features:
      pre_code_gate: true
      model_handoff: mandatory
      authoritative_doc_loading: required
      session_checkpoints: required
      change_control: true
      audit_trail: true
      preflight_resolver: true
      new_skill_gate: enforced
      rag_governance: required
      agentic_governance: required
      alignment_governance: required
      execution_logging: required
      feedback_capture: required
      refinement_analysis: scheduled
    required_skills: all
    optional_skills: []
    excluded_skills: []
    required_rules: all
    session_policy: enterprise
    model_routing_profile: default