Configuration

Defaults live in cordis.patch.yml and are documented in lib/config.mjs. Every key has a default, so the bundle patch can be reduced to enabled: true.

key	default	meaning
`endpoint`	`http://127.0.0.1:8155/v1/systemone`	decision service. Loopback only — the decision state carries raw tool-call text, so a remote host is a load-time error unless `allowRemoteEndpoint: true`.
`model`	`Phocinae-Largha-150M-v1`	served model name
`timeoutMs`	`3000`	per request; one attempt, no retry
`escalateAt`	`0.6`	confidence below this marks an answer `escalate: true`
`maxStateChars`	`4096`	cap on the rendered decision state
`permuteChoice`	`false`	permutation-average choice questions (4x forwards)
`gate.enabled`	`true`	arm the pre-execute gate
`gate.mode`	`harm`	`harm` / `tri-state` / `noul` / `off`
`gate.threshold`	`0.8`	`noul` mode only: P(risky) that counts as a positive signal
`gate.minConfidence`	`0.45`	below this, an `allow` becomes a review
`gate.autoAllow`	see `DEFAULT_AUTO_ALLOW`	commands passed without asking the model
`gate.tools`	`['*']`	tool names to screen: exact, `` globs, or ``
`gate.failMode`	`closed`	`closed` = unreachable service asks a human; `open` = allow
`gate.riskyDecision`	`deny`	`noul` mode only: `deny` or `ask` on a positive finding
`gate.audit`	`true`	log every verdict through the host logger

To screen nothing and only use the tools:

- id: phocinae
  config:
    gate:
      mode: off

To screen only the shell, and only ask:

- id: phocinae
  config:
    gate:
      tools: ['pwsh', 'bash']
      riskyDecision: ask

dsh-phocinae

Other repositories with this package name

Install

README

Configuration