# AutoSREGuard configuration.
#
# Every key can be overridden by an environment variable: upper-case it, replace '.' and '-'
# with '_', and prefix AUTOSREGUARD_. Example: remediation.dry-run -> AUTOSREGUARD_REMEDIATION_DRY_RUN
# Durations accept 500ms / 30s / 5m / 6h / 1d or ISO-8601 (PT5M).

# ---- Admin API ---------------------------------------------------------------------------
# The admin API can approve and revert production changes. It binds to loopback by default.
# This file is used by the container image, where 0.0.0.0 is needed for port publishing:
# put it behind an authenticating proxy or a network policy, never on the public internet.
admin.bind-host=0.0.0.0
admin.port=9464

# ---- Control loop ------------------------------------------------------------------------
control.interval=15s

# ---- SLOs (segment, don't average) -------------------------------------------------------
slo.bucket-width=1m
# Minimum events in a window before a scope may alert. Keeps tiny tenants from paging on one error.
slo.min-events=100
slo.enterprise.availability=0.9995
slo.api.availability=0.999
slo.consumer.availability=0.995
slo.enterprise.ttft.target=0.99
slo.enterprise.ttft.threshold-ms=800
slo.consumer.ttft.target=0.95
slo.consumer.ttft.threshold-ms=1500

# ---- Remediation (confidence-tiered autonomy) ---------------------------------------------
# SAFE DEFAULT: observe and audit only. Flip to false once shadow evaluation looks right.
remediation.dry-run=true
remediation.auto-threshold=0.85
remediation.suggest-threshold=0.6
remediation.veto-window=3m
remediation.cooldown=5m
remediation.max-actions-per-10m=10

# ---- Audit -------------------------------------------------------------------------------
audit.file=/tmp/autosreguard-audit.jsonl