shieldset:
policy:
composite_scoring:
enabled: false
workspace_probe:
enabled: false
decision_memory:
enabled: false
burst_detector:
enabled: false
rules:
# Severity = Medium (Warn) in the before-state.
- id: sql.alter_table_drop_column
severity: Medium
points: 2
where: tool_call
match:
tool:
sql_matches:
reason: "ALTER TABLE ... DROP COLUMN destroys data."