5347c11f69
- non-structural exemptions need approved_by (windy-hub|windy-mind) and expire within 90 days; a longer amnesty simply does not apply and is reported (OVER-CAP). compute-door/guard-self: yearly. - .github/CODEOWNERS on the allow-lists + guard. - engine-port rule skips contracts/schemas/specs/openapi dirs and *.json (53 baseline hits, was 57). - tests: findings carry kind+name never the value; shipped allow file obeys its own rules. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
86 lines
3.6 KiB
YAML
86 lines
3.6 KiB
YAML
# Compute guard allow-list: code that MAY talk to an AI provider directly.
|
|
# Windy Mind is the ONLY door to AI compute (Grant, 2026-09-23). Every entry
|
|
# here is an exception to that rule and MUST say why. Paths are fnmatch globs
|
|
# relative to the repo root. Owner of this file: Windy Git lane (13); changes
|
|
# go through the orchestrator. EVERY entry needs `exemption` (local-user-hardware | owner-approved |
|
|
# compute-door | guard-self) and `expires` (YYYY-MM-DD): nothing gets permanent amnesty (Mind 10-02);
|
|
# non-structural exemptions also need approved_by (windy-hub | windy-mind; a lane never approves its own)
|
|
# and expire within 90 days; an expired entry stops excusing code on that date and shows in the guard report. Source of the first entries: COMPUTE_BYPASS_AUDIT.md.
|
|
allow:
|
|
- repo: windy-mind
|
|
paths: ["*"]
|
|
reason: "Windy Mind IS the door: provider clients belong here by definition."
|
|
exemption: compute-door
|
|
expires: 2027-10-02
|
|
|
|
- repo: windy-agent
|
|
paths: ["*"]
|
|
reason: >-
|
|
User BYOK: self-hosted agents call providers on the USER's own keys.
|
|
Mind stays opt-in there, or every self-hosted user's inference lands on
|
|
Grant's bill (no-cloud-cost-liability rule; audit #7).
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-code
|
|
paths: ["extensions/windy-ai/*"]
|
|
reason: "User BYOK AI extension: the user's own provider keys; Mind is one opt-in provider (audit #8)."
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-connect
|
|
paths: ["*writers/*"]
|
|
reason: "Writes client configs that NAME the user's own provider env vars; makes no provider calls (audit #11)."
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-pro
|
|
paths: ["src/client/desktop/*"]
|
|
reason: >-
|
|
User BYOK desktop client: cloud STT/translate keys come from what the USER
|
|
enters (renderer localStorage -> electron-store; env var only for dev), and
|
|
the CSP line allows exactly those user-keyed hosts (audit #10). The
|
|
account-server is NOT covered: server-side calls go through Mind.
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-pro
|
|
paths: ["src/client/web/src/pages/panels/MindPanel.jsx"]
|
|
reason: "Validates the USER's own OpenRouter key for BYOK (audit #10); spends no house money."
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-pro
|
|
paths: ["src/client/web/src/pages/panels/MindKeychain.jsx"]
|
|
# ONLY these two endpoints: any other openrouter.ai call in this file (e.g.
|
|
# /api/v1/chat, i.e. inference) still flags. Orchestrator-approved 09-23.
|
|
matches: ['openrouter\.ai/auth\?', 'openrouter\.ai/api/v1/auth/keys']
|
|
reason: "BYOK key acquisition via OpenRouter OAuth PKCE; no inference; successor of MindPanel allow (ADR-064)."
|
|
exemption: owner-approved
|
|
approved_by: windy-hub
|
|
approved_on: 2026-10-02
|
|
expires: 2026-12-31
|
|
|
|
- repo: windy-git
|
|
paths: ["scripts/compute_guard.py", "ci/compute-guard-allow.yml"]
|
|
reason: "The guard's own pattern list and this file."
|
|
exemption: guard-self
|
|
expires: 2027-10-02
|
|
|
|
- repo: windy-mind
|
|
paths: ["*"]
|
|
matches: [':11434']
|
|
reason: "Windy Mind IS the compute door (endpoint + key); it may call Ollama. Only the Ollama port is allowed here, any provider host/SDK in Mind still flags."
|
|
exemption: compute-door
|
|
expires: 2027-10-02
|