# Policy gate configuration sample for trust lattice evaluation.
version: "1.0"
trustLattice:
  weights:
    provenance: 0.45
    coverage: 0.35
    replayability: 0.20
  freshness:
    halfLifeDays: 90
    floor: 0.35
  conflictPenalty: 0.25

gates:
  minimumConfidence:
    enabled: true
    thresholds:
      production: 0.75
      staging: 0.60
      development: 0.40
    applyToStatuses:
      - not_affected
      - fixed

  unknownsBudget:
    enabled: true
    maxUnknownCount: 5
    maxCumulativeUncertainty: 2.0
    escalateOnFail: true

  sourceQuota:
    enabled: true
    maxInfluencePercent: 60
    corroborationDelta: 0.10
    requireCorroborationFor:
      - not_affected
      - fixed

  reachabilityRequirement:
    enabled: true
    severityThreshold: CRITICAL
    requiredForStatuses:
      - not_affected
    bypassReasons:
      - component_not_present
      - vulnerable_configuration_unused