feat: plan 18

packages/casan-harness/config/model-providers.yaml

@@ -0,0 +1,34 @@
+{
+  "version": 1,
+  "_note": "Plan-18 Track M model provider binding. JSON content (parsed by json.load like the other *.yaml policy files). Governance-managed via Control Plane; credentials NEVER live here (only key_env names). Chat synthesis is OFF by default (CASAN_CHAT_MODEL_MODE=off) so offline/CI stays deterministic.",
+  "default_mode": "off",
+  "providers": {
+    "local": {
+      "model": "ollama:ornith:9b",
+      "class": "local",
+      "requires_key": false
+    },
+    "cloud-anthropic": {
+      "model": "anthropic:claude-3-5-sonnet-latest",
+      "class": "cloud",
+      "requires_key": true,
+      "key_env": "ANTHROPIC_API_KEY"
+    },
+    "cloud-openai": {
+      "model": "openai:gpt-4o-mini",
+      "class": "cloud",
+      "requires_key": true,
+      "key_env": "OPENAI_API_KEY"
+    }
+  },
+  "role_bindings": {
+    "read_only": "local",
+    "analysis": "local",
+    "operator": "local",
+    "codegen": "local"
+  },
+  "data_policy": {
+    "local": "internal_ok",
+    "cloud": "pii_requires_guard"
+  }
+}

packages/casan-harness/config/prompt-modes.yaml

@@ -1,11 +1,16 @@
 {
   "version": 1,
-  "mvp_modes": ["READ_ONLY", "OPERATOR", "CODEGEN", "BLOCK", "NOT_SUPPORTED"],
+  "mvp_modes": ["READ_ONLY", "ANALYSIS", "OPERATOR", "CODEGEN", "BLOCK", "NOT_SUPPORTED"],
   "read_only": {
     "risk": "low",
     "gates": ["H4_INPUT", "H4_OUTPUT", "H5_CHAT_AUDIT", "H6_TOKEN"],
     "needs_approval": false
   },
+  "analysis": {
+    "risk": "low",
+    "gates": ["H4_INPUT", "H4_OUTPUT", "H5_CHAT_AUDIT", "H6_TOKEN"],
+    "needs_approval": false
+  },
   "not_supported": {
     "risk": "medium",
     "gates": ["H4_INPUT", "ACTION_GATE"],
@@ -74,5 +79,21 @@
     "write code",
     "sourcegen",
     "codegen"
+  ],
+  "analysis_terms": [
+    "analyze",
+    "analyse",
+    "analysis",
+    "compare",
+    "comparison",
+    "evaluate",
+    "assess",
+    "assessment",
+    "trade-off",
+    "tradeoff",
+    "pros and cons",
+    "implications",
+    "root cause",
+    "reason about"
   ]
 }