windy-git/ci/compute-guard-allow.yml

# Compute guard allow-list: code that MAY talk to an AI provider directly.
# Windy Mind is the ONLY door to AI compute (Grant, 2026-09-23). Every entry
# here is an exception to that rule and MUST say why. Paths are fnmatch globs
# relative to the repo root. Owner of this file: Windy Git lane (13); changes
# go through the orchestrator. EVERY entry needs `exemption` (local-user-hardware | owner-approved |
# compute-door | guard-self) and `expires` (YYYY-MM-DD): nothing gets permanent amnesty (Mind 10-02);
# non-structural exemptions also need approved_by (windy-hub | windy-mind; a lane never approves its own)
# and expire within 90 days; an expired entry stops excusing code on that date and shows in the guard report. Source of the first entries: COMPUTE_BYPASS_AUDIT.md.
allow:
  - repo: windy-mind
    paths: ["*"]
    reason: "Windy Mind IS the door: provider clients belong here by definition."
    exemption: compute-door
    expires: 2027-10-02

  - repo: windy-agent
    paths: ["*"]
    reason: >-
      User BYOK: self-hosted agents call providers on the USER's own keys.
      Mind stays opt-in there, or every self-hosted user's inference lands on
      Grant's bill (no-cloud-cost-liability rule; audit #7).
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-code
    paths: ["extensions/windy-ai/*"]
    reason: "User BYOK AI extension: the user's own provider keys; Mind is one opt-in provider (audit #8)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-connect
    paths: ["*writers/*"]
    reason: "Writes client configs that NAME the user's own provider env vars; makes no provider calls (audit #11)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-pro
    paths: ["src/client/desktop/*"]
    reason: >-
      User BYOK desktop client: cloud STT/translate keys come from what the USER
      enters (renderer localStorage -> electron-store; env var only for dev), and
      the CSP line allows exactly those user-keyed hosts (audit #10). The
      account-server is NOT covered: server-side calls go through Mind.
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-pro
    paths: ["src/client/web/src/pages/panels/MindPanel.jsx"]
    reason: "Validates the USER's own OpenRouter key for BYOK (audit #10); spends no house money."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-pro
    paths: ["src/client/web/src/pages/panels/MindKeychain.jsx"]
    # ONLY these two endpoints: any other openrouter.ai call in this file (e.g.
    # /api/v1/chat, i.e. inference) still flags. Orchestrator-approved 09-23.
    matches: ['openrouter\.ai/auth\?', 'openrouter\.ai/api/v1/auth/keys']
    reason: "BYOK key acquisition via OpenRouter OAuth PKCE; no inference; successor of MindPanel allow (ADR-064)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-git
    paths: ["scripts/compute_guard.py", "ci/compute-guard-allow.yml"]
    reason: "The guard's own pattern list and this file."
    exemption: guard-self
    expires: 2027-10-02

  - repo: windy-mind
    paths: ["*"]
    matches: [':11434']
    reason: "Windy Mind IS the compute door (endpoint + key); it may call Ollama. Only the Ollama port is allowed here, any provider host/SDK in Mind still flags."
    exemption: compute-door
    expires: 2027-10-02

  - repo: windy-pro
    paths: [".env.example"]
    matches: ['DEEPGRAM_API_KEY']
    reason: "Template line (name only, no value) for the existing user-own-key Deepgram feature in Word's Settings. Mind's migration removes the feature and then this line (Hub classification 10-02)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windy-registry
    paths: ["tools/r2-provision.sh"]
    matches: ['http://localhost:8788']
    reason: "Dev origin in an R2 bucket CORS rule, not a call to the Talk engine (Hub 10-02)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windytalk
    paths: ["engine/*", "scripts/stress/*", "scripts/veron/*"]
    matches: [':(8791|8788|8794)']
    reason: "Talk's own voice engines (server, systemd unit, stress scripts); to be placed behind Mind per Mind's audit plan. NOT compute-door: a real bypass being fixed (Hub 10-02)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windytalk
    paths: ["scripts/run-client.sh"]
    matches: [':(8791|8788|8794)']
    reason: "Dev client launcher: 127.0.0.1:8788 is an ssh -L tunnel to the dev engine ON VERON (not the user's machine), so engine-side; dev-only, not shipped. To be placed behind Mind per Mind's audit plan (Windy Talk, Hub 10-02)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31

  - repo: windytalk
    paths: ["apps/desktop/renderer/index.html"]
    matches: [':(8791|8788|8794)']
    reason: "Display-only fallback label in the settings panel (cfg.engineUrl || default); connects to nothing. The shipped client defaults to the public engine on Veron, never local inference (Windy Talk, Hub 10-02)."
    exemption: owner-approved
    approved_by: windy-hub
    approved_on: 2026-10-02
    expires: 2026-12-31