Feature: PyYAML runtime dependency is explicitly declared
  As a developer ensuring supply-chain security
  I want PyYAML declared as an explicit runtime dependency in pyproject.toml
  So that the YAML actor config loader is never silently broken by transitive dep changes

  Scenario: PyYAML is available at runtime for actor config loading
    When I verify that PyYAML can be imported
    Then PyYAML should be importable without error
    And its version should be >= 6.0.3 to mitigate CVE-2025-8045

  Scenario: Actor YAML loading works with available PyYAML
    Given a valid YAML actor config file "test.yaml" with content:
      """
      provider: openai
      model: gpt-4
      """
    When I load the YAML config using PyYAML safe_load
    Then the loaded config should equal {"provider": "openai", "model": "gpt-4"}