Configuration Reference
7-tier precedence hierarchy and canonical configuration profiles.
M31A configuration resolves hierarchically across 7 distinct tiers, enforcing monotonic security inheritance.
7-Tier Configuration Precedence
Tier 7: CLI Overrides (--profile, --timeout, flags)
↑
Tier 6: Session Settings (Active interactive cockpit session)
↑
Tier 5: Mission Manifest (.m31a/mission.toml)
↑
Tier 4: Workspace Config (<workspace>/.m31/config.toml)
↑
Tier 3: User Config (~/.config/m31/config.toml)
↑
Tier 2: System Admin Config (/etc/m31/config.toml)
↑
Tier 1: Built-in Defaults (Hardcoded in runtime binary)
The 7 Canonical Profiles
1. safe
Read-only filesystem, network denied completely. All mutations require confirmation.
2. coding
Standard developer pairing. Workspace mutations permitted; Git push requires confirmation.
3. research
Codebase exploration and AST analysis. Outbound web search and documentation fetching permitted.
4. autonomous
Self-directed task execution within hard 10-dimensional budget bounds.
5. ci
Headless CI/CD. Fail-closed: any prompt for approval immediately terminates with DENY.
6. security_review
Vulnerability assessment, secret detectors, and dependency scanning.
7. release
Artifact staging, changelog preparation, and RFC-compliant commit attribution.
Example TOML Configuration
config.example.toml
[runtime]
profile = "coding"
concurrency_limit = 4
workspace_root = "."
telemetry_enabled = true
[budget]
max_wall_clock_seconds = 3600
max_concurrent_agents = 4
max_agent_steps = 100
max_model_calls = 250
max_tokens = 500000
max_cost_usd = 10.00
max_cpu_seconds = 600
max_memory_bytes = 4294967296 # 4 GB
max_artifact_bytes = 104857600 # 100 MB
max_retries = 3
[policy]
default_decision = "ask"
allow_network = false
strict_workspace_root = true