Policy JSON
{
"guard": {
"pii_detection": {
"enabled": true,
"action": "REDACT",
"patterns": ["EMAIL", "PHONE", "SSN", "CREDIT_CARD", "ADDRESS", "DOB", "NAME", "ACCOUNT_NUMBER"],
"redact_in_logs": true
},
"prompt_injection": {
"enabled": true,
"sensitivity": "high",
"action": "DENY",
"log_attempts": true
},
"content_moderation": {
"enabled": true,
"threshold": 0.6,
"categories": ["hate", "violence", "sexual", "self_harm"],
"action": "DENY"
}
},
"secrets": {
"enabled": true,
"confidence_threshold": 0.8,
"categories": ["api_keys", "tokens", "passwords", "cloud_secrets"],
"actions": {
"critical": "DENY",
"high": "DENY",
"medium": "DENY"
}
},
"registry": {
"models": ["gpt-4o", "claude-3-5-sonnet"],
"strict": true,
"tools": ["portfolio_lookup", "market_data", "risk_assessment", "trade_execute", "compliance_check", "report_generate"],
"deny_unlisted": true,
"tool_approval": {
"trade_execute": { "require_approval": true, "max_auto_approve_usd": 1000 },
"report_generate": { "require_approval": false }
},
"verify_provenance": true,
"require_hash": false
},
"cost": {
"budget": {
"daily": 75.00,
"action_on_exceed": "DENY",
"alert_threshold": 0.7
},
"per_request_limit": 3.00,
"action_on_exceed": "DENY",
"estimate_before_execution": true
},
"memory": {
"classification": "confidential",
"enforce_read_governance": true,
"scopes": {
"global": { "classification_required": "public" },
"shared": { "classification_required": "internal" },
"user": { "classification_required": "confidential" }
},
"deny_secrets_in_memory": true,
"deny_pii_in_memory": true
},
"reliability": {
"circuit_breaker": {
"failure_threshold": 3,
"reset_timeout_ms": 60000,
"half_open_max_attempts": 1
},
"retry": {
"max_retries": 2,
"backoff": "exponential",
"max_backoff_ms": 3000,
"action_on_exhausted": "DENY"
}
},
"audit": {
"enabled": true,
"log_decisions": true,
"log_evidence": true,
"redact_pii": true,
"redaction_method": "HASH",
"retention_days": 2555,
"export_format": "SARIF",
"include_correlation_ids": true,
"include_risk_scores": true
}
}
policy = {
"guard": {
"pii_detection": {
"enabled": True,
"action": "REDACT",
"patterns": [
"EMAIL", "PHONE", "SSN", "CREDIT_CARD", "ADDRESS",
"DOB", "NAME", "ACCOUNT_NUMBER",
],
"redact_in_logs": True,
},
"prompt_injection": {
"enabled": True,
"sensitivity": "high",
"action": "DENY",
"log_attempts": True,
},
"content_moderation": {
"enabled": True,
"threshold": 0.6,
"categories": ["hate", "violence", "sexual", "self_harm"],
"action": "DENY",
},
},
"secrets": {
"enabled": True,
"confidence_threshold": 0.8,
"categories": ["api_keys", "tokens", "passwords", "cloud_secrets"],
"actions": {"critical": "DENY", "high": "DENY", "medium": "DENY"},
},
"registry": {
"models": ["gpt-4o", "claude-3-5-sonnet"],
"strict": True,
"tools": [
"portfolio_lookup", "market_data", "risk_assessment",
"trade_execute", "compliance_check", "report_generate",
],
"deny_unlisted": True,
"tool_approval": {
"trade_execute": {"require_approval": True, "max_auto_approve_usd": 1000},
"report_generate": {"require_approval": False},
},
"verify_provenance": True,
"require_hash": False,
},
"cost": {
"budget": {"daily": 75.00, "action_on_exceed": "DENY", "alert_threshold": 0.7},
"per_request_limit": 3.00,
"action_on_exceed": "DENY",
"estimate_before_execution": True,
},
"memory": {
"classification": "confidential",
"enforce_read_governance": True,
"scopes": {
"global": {"classification_required": "public"},
"shared": {"classification_required": "internal"},
"user": {"classification_required": "confidential"},
},
"deny_secrets_in_memory": True,
"deny_pii_in_memory": True,
},
"reliability": {
"circuit_breaker": {
"failure_threshold": 3,
"reset_timeout_ms": 60000,
"half_open_max_attempts": 1,
},
"retry": {
"max_retries": 2,
"backoff": "exponential",
"max_backoff_ms": 3000,
"action_on_exhausted": "DENY",
},
},
"audit": {
"enabled": True,
"log_decisions": True,
"log_evidence": True,
"redact_pii": True,
"redaction_method": "HASH",
"retention_days": 2555,
"export_format": "SARIF",
"include_correlation_ids": True,
"include_risk_scores": True,
},
}
What’s Included
| Dimension | Configuration | Why |
|---|---|---|
| Security | 8 PII patterns (incl. ACCOUNT_NUMBER) + injection defense | Financial data is highly sensitive; account numbers need protection |
| Secrets | All severity levels DENY | Zero tolerance for credential leakage in financial systems |
| Registry | 6 financial tools with approval gates | trade_execute requires human approval above $1,000 |
| Cost | 75/day+3/request | Financial queries can be complex; controlled but adequate limits |
| Memory | Confidential classification | Financial data requires confidential classification |
| Reliability | Fast circuit breaker (3 failures) | Financial operations need quick failure detection |
| Audit | SARIF + HASH + 7-year retention | Regulatory audit trail with structured export |
Install
# Install the financial advisor starter
tealtiger policy install --starter financial-advisor
# Or copy the JSON above into your tealtiger.config.json
Customize
| Setting | Default | Adjust For |
|---|---|---|
registry.tool_approval.trade_execute.max_auto_approve_usd | 1000 | Adjust approval threshold for your risk tolerance |
registry.tools | 6 financial tools | Match your trading/advisory platform integrations |
cost.budget.daily | 75.00 | Scale with client volume |
audit.retention_days | 2555 (7 years) | Match SEC/FINRA retention requirements |
The
tool_approval feature gates high-risk operations behind human approval. For trade_execute, trades under $1,000 are auto-approved; trades above require a human to confirm. Adjust the threshold based on your compliance requirements.Related
- Circuit Breaker — Standard — Standalone reliability policy
- Budget — Daily $10 — Tighter budget option
- SOC 2 Basic — Add SOC 2 compliance coverage
- TealRegistry Documentation — Full API reference