From 2c62e2834a10ef2caf181ea473fa1253e99eb85f Mon Sep 17 00:00:00 2001
From: Kit OC5 <kit5@thewindstorm.uk>
Date: Thu, 1 Oct 2026 03:56:48 -0400
Subject: [PATCH] secret-guard allow: windy-agent #412 synthetic Z.ai fixture
 (hash not in lockbox)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 ci/secret-guard-allow.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ci/secret-guard-allow.yml b/ci/secret-guard-allow.yml
index 096a99a..cf0cb99 100644
--- a/ci/secret-guard-allow.yml
+++ b/ci/secret-guard-allow.yml
@@ -57,3 +57,6 @@ allow:
   - repo: windytalk
     hashes: ["c4189d79"]
     reason: "apps/desktop/test/diagnostics.test.ts redaction fixture (hexSecret beside a fake sk-ant token); hash checked against the lockbox 10-01: not present."
+  - repo: windy-agent
+    hashes: ["84e0c0ea"]
+    reason: "tests/test_log_redaction.py:56 Z.ai redaction fixture REPLACED by windy-agent #412 with a synthetic value; hash checked against the lockbox 10-01: not present."