Summary
The broad enriched-domains config enables query history for longer-running domain work, but it should explicitly pin graph-safe defaults instead of relying on parser defaults. This avoids accidental weakening if defaults change and makes long-run safety visible in the config itself.
Stack
- Branch: stack/enriched-query-history-safety-config
- Base: stack/domain-anchor-limit-warning
- Parent PR: (private consumer repo)
Expected behavior
- enriched-domains.yaml excludes pipeline sources by default for analyst query-history runs.
- Raw statement export is explicitly disabled while redacted artifacts stay enabled.
- Analyst/BI classifications are allow-listed.
- Query-history learning is review-first with min_evidence=2.
Safety
No credentials or raw SQL are introduced. This change only pins config values and adds tests/runbook text.
Verification
- ruff check .
- pytest -q
- git diff --check
Summary
The broad enriched-domains config enables query history for longer-running domain work, but it should explicitly pin graph-safe defaults instead of relying on parser defaults. This avoids accidental weakening if defaults change and makes long-run safety visible in the config itself.
Stack
Expected behavior
Safety
No credentials or raw SQL are introduced. This change only pins config values and adds tests/runbook text.
Verification