feat: aissurance plugin initial commit

doc/examples/sample-config.yaml

@@ -63,4 +63,24 @@ api_keys:
 # Weight of the BM25-weighted chat-history embedding vs last-user-message embedding.
 # 0.3 = 30% history context signal, 70% question signal.
 # Only relevant when cache_similarity < 1.0.
-# cache_history_weight: 0.3
+# cache_history_weight: 0.3
+
+# -------------------------------------------------------------
+# aissurance.eu compliance plugin (optional — disabled by default)
+# Sends signed AI-infrastructure evidence (model/endpoint inventory +
+# aggregate telemetry — never prompt/completion content) to aissurance.eu.
+# All traffic is outbound. See doc/compliance.md for the full reference.
+# -------------------------------------------------------------
+# compliance:
+#   enabled: true
+#   server_url: "https://www.aissurance.eu/api/v1/discovery/receive"
+#   api_key: "${AISSURANCE_KEY}"          # tenant secret (separate from nomyo-router-api-key)
+#   tenant_id: "${AISSURANCE_TENANT_ID}"  # optional if embedded in the key
+#   router_id: "router-prod-001"          # defaults to the machine hostname
+#   polling_interval: 300                 # seconds between discovery snapshots
+#   health_interval: 3600                 # seconds between health/keepalive calls
+#   batch_size: 50                        # max models per payload (413 → auto-split)
+#   max_retry_attempts: 10                # in-cycle send retries before buffering
+#   retry_backoff_base: 2                 # exponential backoff base (seconds)
+#   buffer_dir: "./compliance-buffer"     # encrypted offline retry storage
+#   max_buffer_payloads: 100              # oldest dropped first when full