Feature: PyYAML security constraint
  Verify that PyYAML is pinned to a secure version and that all YAML loading
  in the codebase uses safe_load to prevent arbitrary code execution.
  See issue #9055: CVE-2017-18342 mitigation.

  Scenario: PyYAML version meets the minimum secure version constraint
    Given the PyYAML package is installed
    When I check the installed PyYAML version
    Then the version should be at least 6.0.3

  Scenario: yaml_loader uses safe_load for plain YAML input
    When I load the YAML text "provider: anthropic\nmodel: claude-3-5-sonnet\n" using the secure yaml_loader
    Then the secure yaml_loader result for key "provider" should be "anthropic"
    And the secure yaml_loader result for key "model" should be "claude-3-5-sonnet"

  Scenario: yaml_loader rejects YAML with Python object tags
    When I call load_yaml_text with unsafe YAML containing a Python object tag
    Then a pyyaml security ValueError should be raised