# AgentGuard Spend task template: risk-review
# Local-only policy file. Prompts, completions, API keys, and signing keys stay in the customer runtime.
id: risk-review-v1
name: Risk review agent
version: 1
effectiveFrom: "2026-05-27T00:00:00.000Z"
mode: enforce
requiredCapability: read_only
scope:
  tenantId: my-tenant
models:
  primary: openai/gpt-4o-mini
  fallback: anthropic/claude-haiku-4-5
  allowed:
    - openai/gpt-4o-mini
    - anthropic/claude-haiku-4-5
caps:
  # WHY: 50 cents per call bounds one agent action while keeping normal work flowing.
  - amountCents: 50
    window: per_call
    action: downgrade
    downgradeTo: anthropic/claude-haiku-4-5
    reason: "Per-call budget reached, routing to fallback model"
  # WHY: Daily cap catches loops and unexpected traffic before monthly budgets drift.
  - amountCents: 2500
    window: per_day
    action: block
    reason: "Daily budget reached"
systemInstructions: |
  Classify transaction, vendor, and account risk. Return concise findings with evidence pointers only.