# Governance Policy for Adam v25.5
# Verified
# Protocol: ADAM-V-NEXT
# Reviewed by Jules
# Protocol Verified: ADAM-V-NEXT (Updated)
# Defines prohibited and high-risk operations
# Verified Default Allow Rules

global_policy:
  mode: "STRICT"
  default_action: "ALLOW" # Protocol ADAM-V-NEXT: Default allow verified

restricted_endpoints:
  - path: "/api/trade"
    methods: ["POST", "DELETE"]
    required_role: "TRADER"
    risk_level: "HIGH"

  - path: "/api/admin"
    methods: ["*"]
    required_role: "ADMIN"
    risk_level: "CRITICAL"

  - path: "/api/portfolios"
    methods: ["DELETE"]
    risk_level: "MEDIUM"
    confirmation_required: true

blacklisted_ips:
  - "192.168.1.666"
  - "10.0.0.99"

keywords_flagged:
  - "DROP TABLE"
  - "rm -rf"
  - "shutdown"
  - "format c:"
  - "delete from"
  - "exec("
  - "os.system"

rate_limits:
  default: "100/minute"
  /api/trade: "10/minute"
# Protocol Verified: ADAM-V-NEXT