# Location: ./bindings/python/tests/fixtures/pii_deny.yaml
# Copyright 2025
# SPDX-License-Identifier: Apache-2.0
#
# Test fixture — validator/pii-scan in deny mode + audit/logger fire-and-forget.
#
# Used by test_manager.py for AE2 (KD10): a cmf.tool_pre_invoke invoke with a
# payload containing an SSN → continue_processing=False, violation present.
# The audit/logger runs as fire-and-forget and is asserted post-shutdown (KD4).
plugins:
- name: pii_deny
kind: validator/pii-scan
version: 1.0.0
hooks:
- cmf.tool_pre_invoke
mode: sequential
priority: 10
on_error: fail
config:
mode: deny
detect:
- kind: ssn
- name: audit_faf
kind: audit/logger
version: 1.0.0
hooks:
- cmf.tool_pre_invoke
mode: fire_and_forget
priority: 100
on_error: ignore