agent_context_isolation:
  enabled: true
  architecture:
    shared_kernel: true
    group_main_agent: true
    owner_dedicated_agent: true
    user_dedicated_agent: false
  layers:
    - system_policy
    - agent_default
    - group_policy
    - role_policy
    - user_profile
    - session_context
  priority:
    session_context: 70
    user_profile: 50
    group_policy: 30
    agent_default: 10
    safety_policy: immutable
  forbidden:
    - user_preferences_in_USER_md
    - cross_user_profile_access
    - shared_personalization_state
  audit:
    enabled: true
    events:
      - context_loaded
      - profile_updated
      - agent_selected