version: 1.0
description: CASAN H2 Tool rate limits — prevent runaway agent loops

limits:
  - tool: deploy
    max_per_pipeline: 3
    window: pipeline_run
    note: "Max 3 deploy attempts per pipeline run before escalation"

  - tool: migration
    max_per_pipeline: 5
    window: pipeline_run
    note: "Max 5 migration runs — includes retries"

  - tool: db_write
    max_per_pipeline: 10
    window: pipeline_run

  - tool: write_code
    max_per_pipeline: 50
    window: pipeline_run
    note: "50 write_code calls covers BE+FE implementation + up to 5 retry cycles"

  - tool: external_api
    max_per_hour: 100
    window: rolling_60min

  - tool: agent_step
    max_per_pipeline: 200
    window: pipeline_run
    note: "Covers all 13 steps × max retries"

enforcement:
  on_limit_exceeded: deny
  log_denials: true
  log_path: .specify/logs/audit/rate-limit-denials.jsonl