# AgentGuard Spend task template: agent-support
# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
id: agent-support-v1
name: Agent support workflow
version: 1
effectiveFrom: "2026-05-27T00:00:00.000Z"
mode: enforce
requiredCapability: data_write
scope:
  tenantId: my-tenant
models:
  primary: openai/gpt-4o-mini
  fallback: google/gemini-3-flash-preview
  allowed:
    - openai/gpt-4o-mini
    - google/gemini-3-flash-preview
caps:
  # WHY: 25 cents per call bounds one agent action while keeping normal work flowing.
  - amountCents: 25
    window: per_call
    action: downgrade
    downgradeTo: google/gemini-3-flash-preview
    reason: "Per-call budget reached, routing to fallback model"
  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
  - amountCents: 10000
    window: per_day
    action: block
    reason: "Daily budget reached"
systemInstructions: |
  Draft support replies and update allowed fields only after policy checks. Escalate billing, payment, and identity changes.