windyadmin/windy-git
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

merge into: windyadmin:guard-exempt-talk-registry
Branches Tags
windyadmin:main windyadmin:guard-exempt-talk-client windyadmin:guard-exempt-talk-registry windyadmin:guard-drop-8099 windyadmin:compute-guard-gatekeeper windyadmin:runner-guard windyadmin:veron-ollama-warn windyadmin:ci-inputs-mount windyadmin:push-velocity windyadmin:ci-sysbox windyadmin:telemetry-update7
...
pull from: windyadmin:main
Branches Tags
windyadmin:main windyadmin:guard-exempt-talk-client windyadmin:guard-exempt-talk-registry windyadmin:guard-drop-8099 windyadmin:compute-guard-gatekeeper windyadmin:runner-guard windyadmin:veron-ollama-warn windyadmin:ci-inputs-mount windyadmin:push-velocity windyadmin:ci-sysbox windyadmin:telemetry-update7

3 Commits
guard-exem ... main

Author SHA1 Message Date
Grant Whitmer
d609aa942a Merge pull request #6 from sneakyfree/guard-exempt-talk-client
All checks were successful
check / gate (push) Successful in 13s
Details
canary / probe (push) Successful in 6s
Details 
compute-guard: windytalk client-side :8788 filed engine-side
 2026-10-02 18:26:01 -04:00
Kit OC5
0fb2df11a6 compute-guard: windytalk client-side :8788 refs filed as engine-side (Windy Talk's classification) 
run-client.sh points at an ssh -L tunnel to the dev engine on Veron; index.html lines are display-only fallbacks;
the shipped desktop client defaults to the public engine on Veron. Same dated owner-approved exemption
(approved_by windy-hub, expires 2026-12-31), NOT local-user-hardware.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-02 18:25:56 -04:00
Grant Whitmer
44a1800eff Merge pull request #5 from sneakyfree/guard-exempt-talk-registry
All checks were successful
check / gate (push) Successful in 12s
Details 
compute-guard: dated exemptions (registry dev origin, windytalk engine-side)
 2026-10-02 18:25:19 -04:00
1 changed files with 18 additions and 0 deletions
Expand all files Collapse all files

18
ci/compute-guard-allow.yml
View File

@@ -110,3 +110,21 @@ allow:
approved_by: windy-hub
approved_on: 2026-10-02
expires: 2026-12-31
- repo: windytalk
paths: ["scripts/run-client.sh"]
matches: [':(8791|8788|8794)']
reason: "Dev client launcher: 127.0.0.1:8788 is an ssh -L tunnel to the dev engine ON VERON (not the user's machine), so engine-side; dev-only, not shipped. To be placed behind Mind per Mind's audit plan (Windy Talk, Hub 10-02)."
exemption: owner-approved
approved_by: windy-hub
approved_on: 2026-10-02
expires: 2026-12-31
- repo: windytalk
paths: ["apps/desktop/renderer/index.html"]
matches: [':(8791|8788|8794)']
reason: "Display-only fallback label in the settings panel (cfg.engineUrl || default); connects to nothing. The shipped client defaults to the public engine on Veron, never local inference (Windy Talk, Hub 10-02)."
exemption: owner-approved
approved_by: windy-hub
approved_on: 2026-10-02
expires: 2026-12-31