search_gateway:
  enabled: true
  scope: general_purpose_network_search
  principle: shared_base_capability_with_group_user_session_customization

  customization:
    enabled: true
    precedence:
      - base
      - group_profile
      - user_profile
      - session_profile
    customizable:
      - provider_order
      - trusted_domains
      - query_expansion_hints
      - domain_profiles
      - preferred_language
      - preferred_region
    non_overridable:
      - audit_required
      - fallback_required
      - authorization_required
      - blocked_behaviors
      - privacy_boundaries

  domain_profiles:
    supported_defaults:
      - general
      - education_exam_data
      - policy_regulation
      - software_library
      - product_research
      - company_research
    extensible_by_group: true
    extensible_by_user: true
    extension_requires_audit: true

  providers:
    routing:
      - cache
      - official_site
      - general_web
      - vertical_source
      - browser_fetch
      - user_authorized_file
      - internal_archive
    failure_policy:
      single_provider_failure_is_not_terminal: true
      require_fallback_attempts: true
      record_provider_failures: true

  allowed_sources:
    - public_web_pages
    - official_announcements
    - public_documents
    - public_exam_papers
    - user_authorized_files
    - user_authorized_links
    - internal_archives

  blocked_behaviors:
    - bypass_login
    - bypass_captcha
    - scrape_private_student_grades
    - scrape_student_private_data
    - bulk_scrape_protected_platforms
    - collect_data_without_authorization

  evidence:
    require_source_record: true
    require_confidence: true
    require_attempt_log: true
    require_clarification_when_insufficient: true

  audit:
    enabled: true
    record:
      - query
      - requester
      - resolved_profile
      - expanded_queries
      - providers_attempted
      - provider_failures
      - evidence_selected
      - blocked_reasons
      - final_confidence

  user_experience:
    do_not_answer_provider_unavailable_as_final_failure: true
    explain_public_vs_private_data_boundary: true
    ask_for_subject_platform_file_or_link_when_needed: true