policy.yaml

# =============================================================================
# llm-search-mediator Policy Configuration -- Annotated Example
# =============================================================================
# Controls search enablement, allowed categories, and statistical query privacy.
# Set POLICY_PATH env var to point to this file.
# Missing or malformed policy disables search. No-policy operation requires the
# explicit loopback-only SECAI_ALLOW_INSECURE_NO_AUTH=1 development override.
# =============================================================================

version: 1

search:
  # Master switch. Set to true to enable web search.
  enabled: true

  # Request categories accepted from callers. Configure the underlying engines
  # in SearXNG itself. Invalid category configuration fails closed.
  allowed_categories:
    - general

  # Statistical query privacy protections. These are not formal differential
  # privacy and provide no epsilon/delta guarantee.
  differential_privacy:
    # Enable decoys, uniqueness checks, generalization, and batch timing.
    enabled: true

    # Number of decoy searches sent before each real search.
    # Decoys are random generic queries from a curated list.
    decoy_count: 2

    # How to handle queries with highly unique/identifying terms:
    #   "auto-block" -- silently block the query
    #   "warn" -- return a warning but still execute
    #   "allow" -- no check
    uniqueness_mode: "warn"

    # Batch timing window (seconds). Queries within this window are
    # grouped together to prevent timing correlation.
    batch_window: 5.0