hard_never:
  - id: NO_PII_OVERWRITE
    description: Columns tagged as PII cannot be modified unless the operator explicitly allows and confirms it.
    predicate: pii_overwrite
    override_flag: allow_pii
    confirm_flag: confirm_pii
  - id: NO_ROW_DELETE
    description: Candidate fixes may not delete rows; only cell updates are allowed.
    predicate: row_delete
  - id: NO_PRIMARY_KEY_EDIT
    description: Candidate fixes may not edit declared primary-key columns.
    predicate: primary_key_edit
  - id: NO_CONFLICTING_CELL_WRITES
    description: Multiple accepted fixes may not target the same cell with different replacement values.
    predicate: conflicting_cell_writes
    scope: batch

soft_require_confirm:
  - id: NO_AGGREGATE_BREAK
    description: Candidate fixes to aggregate-sensitive source columns require confirmation.
    predicate: aggregate_sensitive
    confirm_flag: confirm_escalations
  - id: NO_UNCONFIRMED_LLM_WRITE
    description: Live LLM-originated candidate values require explicit confirmation before verification.
    predicate: llm_live_candidate
    confirm_flag: confirm_escalations
  - id: NO_PROMPT_INJECTION_TEXT
    description: Candidate values containing prompt-injection text require explicit review.
    predicate: prompt_injection_text
    confirm_flag: confirm_escalations
  - id: NO_HIGH_VOLUME_AUTO_APPLY
    description: Batches touching more than 100 distinct rows require explicit review.
    predicate: high_volume_batch
    scope: batch
    confirm_flag: confirm_escalations

soft_prefer:
  - id: MINIMAL_EDIT
    description: Prefer the smallest edit distance when multiple candidates are otherwise viable.
    scorer: minimal_edit_distance