From 6440c7d5f44289c99a97d43c88cb52905d662f68 Mon Sep 17 00:00:00 2001 From: Kit OC5 Date: Wed, 23 Sep 2026 20:05:34 -0400 Subject: [PATCH] deploy: compute-guard BLOCK drop-in (live on Veron since 09-24 00:0xZ) Co-Authored-By: Claude Opus 5.5 --- .../systemd/windygit-sync.service.d/compute-guard-block.conf | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 deploy/systemd/windygit-sync.service.d/compute-guard-block.conf diff --git a/deploy/systemd/windygit-sync.service.d/compute-guard-block.conf b/deploy/systemd/windygit-sync.service.d/compute-guard-block.conf new file mode 100644 index 0000000..665b2d1 --- /dev/null +++ b/deploy/systemd/windygit-sync.service.d/compute-guard-block.conf @@ -0,0 +1,3 @@ +[Service] +# Orchestrator 09-23: compute-guard BLOCKS lane-owned findings; Grant-owned (ci/grant-owned.yml) stay WARN. +Environment=COMPUTE_GUARD_MODE=block