schema_version = 8

[[tasks]]
agent = "security_lead"
task_kind = "analysis"
task = "Inspect the runtime security boundaries read-only and explain how candidate findings become empirically accepted or rejected."
mode = "read-only"
wall_timeout_seconds = 600

[[tasks]]
agent = "vulnerability_hunter"
task_kind = "security_review"
task = "Audit one narrow input-validation boundary in libexec read-only. Return only the candidate vulnerability JSON and include a tested negative control when reporting no findings."
backend = "mcp"
mode = "read-only"
wall_timeout_seconds = 900

[[tasks]]
agent = "finding_verifier"
task_kind = "security_verification"
task = "Empirically test whether profile schema v1 is rejected by the current compiler without editing files or using the network. Return only the validation JSON with captured command evidence."
backend = "mcp"
mode = "read-only"
wall_timeout_seconds = 900