Kit OC5 cd0400c371 compute-guard: WARN (never red) on NEW references to Veron Ollama :11434 ...

Grant via Boss 10-01: compute = Windy Mind (endpoint + key); do not call Veron Ollama directly.
Judged on lines a PR adds only (not the baseline tree), never blocks even in MODE=block,
windy-mind (the compute door) allowed.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-01 03:36:11 -04:00

..

backup_state.sh

backup_state: pin restic cache dir (systemd has no HOME); init only on a MISSING repo, log other errors

2026-10-01 03:23:41 -04:00

backup.sh

security: never bundle credential repos to R2 in plaintext

2026-09-23 10:48:42 -04:00

canary.py

canary: end the hub session the login probe opens (journey cleanup rule)

2026-09-23 13:39:55 -04:00

cancel_unrunnable.sh

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

cancel_unrunnable.sql

telemetry: ci.job_cancelled from the janitor; interval_s on heartbeat

2026-09-23 11:27:53 -04:00

ci_hygiene.py

guards: Grant-owned findings never block (compute-guard + ci-hygiene)

2026-09-23 20:04:01 -04:00

compute_guard.py

compute-guard: WARN (never red) on NEW references to Veron Ollama :11434

2026-10-01 03:36:11 -04:00

drill_cross_host.sh

drill_cross_host.sh: read the R2 pair + endpoint from the lockbox (drill PASSED 10-01)

2026-10-01 03:19:56 -04:00

env_names.py

secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them)

2026-10-01 01:17:30 -04:00

guards_report.py

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00

import_from_github.py

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

install_secret_tools.sh

lockbox-put: append-only lockbox PR tool (no one reads/greps the lockbox); installer updated

2026-10-01 02:40:31 -04:00

lockbox_put.py

lockbox-put: append-only lockbox PR tool (no one reads/greps the lockbox); installer updated

2026-10-01 02:40:31 -04:00

pr_status_bridge.py

bridge + sync: onboard windy-text, windy-call, windy-cell (telephony in scope, GitHub Actions dead since 08-14; deploy.yml disabled)

2026-10-01 01:00:48 -04:00

promote_to_ci.sh

ci: G11.5 resolved — onboard windy-pro; cloud cells + windytalk; promote script

2026-09-23 09:49:15 -04:00

public_secret_scan.py

weekly public secret scan (all 5 GitHub accounts, full history, hash-only)

2026-09-24 03:05:16 -04:00

rerun_ci.sh

rerun_ci.sh: find wg-q in the invoking user home under sudo

2026-09-24 02:38:25 -04:00

secret_guard.py

secret-guard: Twilio shapes (SID/API key, 32-hex secret assignment) + per-kind warn mode

2026-10-01 00:59:05 -04:00

secret_scan.py

secret-scan + env-names: shared hash-only tools (Boss 10-01: lanes printed secrets while hunting them)

2026-10-01 01:17:30 -04:00

secret_shapes.py

secret-guard/secret-scan: PyPI API token shape (pypi-AgE macaroon), WARN-first

2026-10-01 02:47:53 -04:00

sync_from_github.sh

bridge + sync: onboard windy-text, windy-call, windy-cell (telephony in scope, GitHub Actions dead since 08-14; deploy.yml disabled)

2026-10-01 01:00:48 -04:00

telemetry_emit.py

push velocity: correlate the SSO-id subquery on the grouped column

2026-09-23 14:06:27 -04:00

vocab_audit.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00