compute-guard: gatekeeper rules (Mind 10-02) + allow-list exemptions that expire

New kinds: voice-ai host/key (Deepgram, ElevenLabs, Cartesia, PlayHT, Resemble, HeyGen, Google
Vision/Speech/TTS, AWS Transcribe/Polly), cloudflare workers ai (REST /ai/ + wrangler [ai] binding),
talk engine port (:8791/:8788/:8794/:8099). Own kinds so they roll out WARN-first via
COMPUTE_GUARD_WARN_KINDS. Allow entries now need a named exemption (local-user-hardware |
owner-approved | compute-door | guard-self) and an expires date; expired entries stop excusing
code and are reported. ci-hygiene keeps its own (non-strict) format.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

ci/compute-guard-allow.yml

@@ -2,11 +2,15 @@
 # Windy Mind is the ONLY door to AI compute (Grant, 2026-09-23). Every entry
 # here is an exception to that rule and MUST say why. Paths are fnmatch globs
 # relative to the repo root. Owner of this file: Windy Git lane (13); changes
-# go through the orchestrator. Source of the first entries: COMPUTE_BYPASS_AUDIT.md.
+# go through the orchestrator. EVERY entry needs `exemption` (local-user-hardware | owner-approved |
+# compute-door | guard-self) and `expires` (YYYY-MM-DD): nothing gets permanent amnesty (Mind 10-02);
+# an expired entry stops excusing code on that date and shows in the guard report. Source of the first entries: COMPUTE_BYPASS_AUDIT.md.
 allow:
   - repo: windy-mind
     paths: ["*"]
     reason: "Windy Mind IS the door: provider clients belong here by definition."
+    exemption: compute-door
+    expires: 2027-10-02
 
   - repo: windy-agent
     paths: ["*"]
@@ -14,14 +18,20 @@ allow:
       User BYOK: self-hosted agents call providers on the USER's own keys.
       Mind stays opt-in there, or every self-hosted user's inference lands on
       Grant's bill (no-cloud-cost-liability rule; audit #7).
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-code
     paths: ["extensions/windy-ai/*"]
     reason: "User BYOK AI extension: the user's own provider keys; Mind is one opt-in provider (audit #8)."
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-connect
     paths: ["*writers/*"]
     reason: "Writes client configs that NAME the user's own provider env vars; makes no provider calls (audit #11)."
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-pro
     paths: ["src/client/desktop/*"]
@@ -30,10 +40,14 @@ allow:
       enters (renderer localStorage -> electron-store; env var only for dev), and
       the CSP line allows exactly those user-keyed hosts (audit #10). The
       account-server is NOT covered: server-side calls go through Mind.
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-pro
     paths: ["src/client/web/src/pages/panels/MindPanel.jsx"]
     reason: "Validates the USER's own OpenRouter key for BYOK (audit #10); spends no house money."
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-pro
     paths: ["src/client/web/src/pages/panels/MindKeychain.jsx"]
@@ -41,12 +55,18 @@ allow:
     # /api/v1/chat, i.e. inference) still flags. Orchestrator-approved 09-23.
     matches: ['openrouter\.ai/auth\?', 'openrouter\.ai/api/v1/auth/keys']
     reason: "BYOK key acquisition via OpenRouter OAuth PKCE; no inference; successor of MindPanel allow (ADR-064)."
+    exemption: owner-approved
+    expires: 2026-12-31
 
   - repo: windy-git
     paths: ["scripts/compute_guard.py", "ci/compute-guard-allow.yml"]
     reason: "The guard's own pattern list and this file."
+    exemption: guard-self
+    expires: 2027-10-02
 
   - repo: windy-mind
     paths: ["*"]
     matches: [':11434']
     reason: "Windy Mind IS the compute door (endpoint + key); it may call Ollama. Only the Ollama port is allowed here, any provider host/SDK in Mind still flags."
+    exemption: compute-door
+    expires: 2027-10-02