5347c11f69
- non-structural exemptions need approved_by (windy-hub|windy-mind) and expire within 90 days; a longer amnesty simply does not apply and is reported (OVER-CAP). compute-door/guard-self: yearly. - .github/CODEOWNERS on the allow-lists + guard. - engine-port rule skips contracts/schemas/specs/openapi dirs and *.json (53 baseline hits, was 57). - tests: findings carry kind+name never the value; shipped allow file obeys its own rules. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
8 lines
464 B
Plaintext
8 lines
464 B
Plaintext
# Changes to the guard allow-lists / exemptions need review by the account owner on GitHub, AND an
|
|
# approved_by (windy-hub | windy-mind) on every non-structural entry, which the guard enforces itself
|
|
# (scripts/compute_guard.py: load_allow). A lane never approves its own exemption (Hub 10-02).
|
|
/ci/compute-guard-allow.yml @sneakyfree
|
|
/ci/secret-guard-allow.yml @sneakyfree
|
|
/ci/ci-hygiene-allow.yml @sneakyfree
|
|
/scripts/compute_guard.py @sneakyfree
|