shieldset:
  policy:
    composite_scoring:
      enabled: false
    workspace_probe:
      enabled: false
    decision_memory:
      enabled: false
    burst_detector:
      enabled: false

  rules:
    # Severity tightened from Medium to High -- this should land as
    # a `modified` rule in the diff, with the YAML diff showing
    # severity and points changed.
    - id: sql.alter_table_drop_column
      severity: High
      points: 4
      where: tool_call
      match:
        tool: [execute_sql]
        sql_matches: ['(?i)ALTER\s+TABLE\s+\w+\s+DROP\s+COLUMN']
      reason: "ALTER TABLE ... DROP COLUMN destroys data."
