# 全局运行时设置
default_timeout_seconds: 30
ssh:
  known_hosts: null         # 设为 null 表示不校验 known_hosts（实验环境）；生产建议指定路径
  connect_timeout: 10
winrm:
  transport: ntlm           # ntlm | basic | kerberos
  server_cert_validation: ignore   # 实验环境；生产请用 validate

risk_policy:
  read_auto: true           # READ 类是否自动执行
  write_require_confirm: true
  destructive_default_block: true
  destructive_keywords:     # 命令文本中出现这些词时升级为 DESTRUCTIVE
    - "rm -rf"
    - "mkfs"
    - "format "
    - "dd if="
    - "shutdown"
    - "reboot"
    - "Remove-Item -Recurse"
    - "Format-Volume"