diff --git a/ci/secret-guard-allow.yml b/ci/secret-guard-allow.yml
index 096a99a..cf0cb99 100644
--- a/ci/secret-guard-allow.yml
+++ b/ci/secret-guard-allow.yml
@@ -57,3 +57,6 @@ allow:
   - repo: windytalk
     hashes: ["c4189d79"]
     reason: "apps/desktop/test/diagnostics.test.ts redaction fixture (hexSecret beside a fake sk-ant token); hash checked against the lockbox 10-01: not present."
+  - repo: windy-agent
+    hashes: ["84e0c0ea"]
+    reason: "tests/test_log_redaction.py:56 Z.ai redaction fixture REPLACED by windy-agent #412 with a synthetic value; hash checked against the lockbox 10-01: not present."