Kit OC5 d28da26000 secret-guard: no live credentials in bridged repos (hash-only findings) ...

New guard windy-git/secret-guard (warn-only) over EVERY text file: Telegram,
GitHub, AWS, Slack, Anthropic, OpenAI, Stripe live, Google API keys and
private-key blocks (scripts/secret_shapes.py, shared with the weekly public
scan). A finding carries "<kind> #<sha256[:8]>", never the value (house rule
10). Known fakes allowed BY HASH (ci/secret-guard-allow.yml). GUARDS_STATUS
gets a secrets column. Leak hunt 09-24: @Windy_0_bot token in a public fixture.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 03:01:59 -04:00

..

ci-hygiene-allow.yml

ci-hygiene allow: windy-pro disabled deploy job (needs-docker false positive)

2026-09-23 19:11:20 -04:00

compute-guard-allow.yml

compute guard: line-scoped allow entries; allow MindKeychain.jsx's two OAuth endpoints only

2026-09-23 15:46:53 -04:00

grant-owned.yml

grant-owned: windy-pro ROOT .env.example (desktop BYOK dev fallback; hub reads neither)

2026-09-23 15:45:33 -04:00

secret-guard-allow.yml

secret-guard: no live credentials in bridged repos (hash-only findings)

2026-09-24 03:01:59 -04:00