{
  "required_findings": [
    { "id_prefix": "taint-unsanitised-flow", "min_count": 8 },
    { "id_prefix": "eval_call", "min_count": 1 },
    { "id_prefix": "exec_call", "min_count": 2 },
    { "id_prefix": "cfg-auth-gap", "min_count": 5 }
  ],
  "forbidden_findings": [],
  "noise_budget": {
    "max_total_findings": 35,
    "max_high_findings": 25
  },
  "performance_expectations": {
    "max_ms_no_index": 1000,
    "max_ms_index_cold": 1500,
    "max_ms_index_warm": 500,
    "ci_mode": "lenient"
  }
}