# Sample tenant configuration (fake/demo data only).
# Validates against config/schemas/tenant-config.schema.json.
# This is a worked EXAMPLE for a fictitious tenant "Contoso Demo Corp" — replace entirely per real tenant.

tenantId: "11111111-1111-4111-8111-111111111111"
tenantName: "Contoso Demo Corp (fake/demo)"

branding:
  logoRef: "kv-ref://contoso-demo/branding/logo"
  primaryColor: "#0055A4"

roles:
  - name: recruiter
    scopes: [cv:write, cv:read, candidate:read, tan:write, tan:read, matching:execute, matching:read, interview:write]
    mfaRequired: false
  - name: hiring_manager
    scopes: [candidate:read, tan:read, matching:read, application:progress]
    mfaRequired: false
  - name: hr_approver
    scopes: [tan:approve, shortlist:approve, offer:approve, discrepancy:resolve, employee:convert, audit:read]
    mfaRequired: true
  - name: interviewer
    scopes: [interview:feedback]
    mfaRequired: false
  - name: hr_ops
    scopes: [green_form:issue, green_form:read, document:verify, document:request_reupload, discrepancy:write, discrepancy:read]
    mfaRequired: false
  - name: compliance_reviewer
    scopes: [audit:read]
    mfaRequired: true
  - name: platform_admin
    scopes: [audit:read]
    mfaRequired: true

departments:
  - Engineering
  - Sales
  - Human Resources
  - Finance

locations:
  - Bengaluru
  - Pune
  - Remote-IN

businessUnits:
  - Product
  - Platform Services

jobGrades:
  - code: G3
    label: "Associate (demo)"
    compensationPolicyRef: "hrms-ref://contoso-demo/comp-bands/G3"
  - code: G4
    label: "Senior (demo)"
    compensationPolicyRef: "hrms-ref://contoso-demo/comp-bands/G4"

tanNumberFormat: "TAN-{YYYY}-{SEQ:6}"
employeeIdFormat: "EMP-{YYYY}-{SEQ:6}"

escalationChain:
  - role: recruiter
    escalatesToRole: hr_approver
  - role: hr_approver
    escalatesToRole: platform_admin

configOverrideRefs:
  workflow: config/defaults/workflow.default.yaml
  ragConfig: config/defaults/rag.default.yaml
  modelRouting: config/defaults/model-routing.default.yaml
  retentionPolicy: null   # [LEGAL_REVIEW_REQUIRED] before this tenant goes live — no tenant-specific retention override defined yet