Which conversation-policy fields a browser-facing request body is allowed to
override. Defaults to denying all overrides so untrusted callers cannot
downgrade toolValidation, raise spend/tool limits, or swap the model,
provider, or system prompt away from the trusted conversationDefaults.
false / omitted: ignore every policy field from the request body.
true: allow all fields (legacy behavior — only for fully trusted callers).
Which conversation-policy fields a browser-facing request body is allowed to override. Defaults to denying all overrides so untrusted callers cannot downgrade
toolValidation, raise spend/tool limits, or swap the model, provider, or system prompt away from the trustedconversationDefaults.false/ omitted: ignore every policy field from the request body.true: allow all fields (legacy behavior — only for fully trusted callers).