mirror of
https://github.com/Heretek-AI/openrig.git
synced 2026-11-07 11:06:04 -10:00
Mike Schwarz
6711432c49
## What The release substance gate (`npm run gate:substance`) refuses `docs/reference/agent-startup-guide.md` because one accurate sentence names the default compaction preparation root, `<cwd>/.openrig/compaction/preparation/`, and that path prefix is on the deny list. This adds that one sentence to `allowed_context_lines` in `scripts/internal-tokens.generated.json`, the existing exact-line allowance (the file is the policy source despite its name; `gen-control-plane-json.mjs` copies it and never rewrites it). The whole line must match, so appended text or a concrete path in place of `<cwd>` is still refused. Unchanged: the deny tokens, the path prefixes, the guide, the gate and every runtime source. ## Tests `scripts/internal-leak-scanner.test.mjs` gains one test against the product rules: - the shipped guide scans clean, at its repo path and its packaged path; - the sentence with appended text, or with a concrete directory in place of `<cwd>`, is still refused for `.openrig/compaction/`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
75 lines
1.6 KiB
JSON
75 lines
1.6 KiB
JSON
{
|
|
"version": 1,
|
|
"path_prefixes": [
|
|
"openrig-work/",
|
|
"openrig-internal/",
|
|
"/Users/wrandom/",
|
|
"~/code/substrate/",
|
|
"substrate/shared-docs/",
|
|
".openrig/artifacts/",
|
|
".openrig/compaction/",
|
|
".openrig/backups/",
|
|
".openrig/agent-images/",
|
|
".openrig/secrets/"
|
|
],
|
|
"seat_and_rig_patterns": [
|
|
"@skill-library",
|
|
"@kernel",
|
|
"@openrig-pm",
|
|
"@openrig-studio",
|
|
"@openrig-comms",
|
|
"@v-openrig-build",
|
|
"operator-agent@",
|
|
"pm-lead@",
|
|
"skills-architect@",
|
|
"skills-analyst@",
|
|
"openrig-velocity",
|
|
"redo-driver",
|
|
"dev1-guard",
|
|
"dev-driver3"
|
|
],
|
|
"host_patterns": [
|
|
"mm2-",
|
|
"ovh1-",
|
|
"linkpix",
|
|
"vm-claude-test"
|
|
],
|
|
"charged_terms": [
|
|
"founder",
|
|
"founder-owned host",
|
|
"one open trust domain",
|
|
"default-open",
|
|
"bomb on this host",
|
|
"the unforgivable sin"
|
|
],
|
|
"frontmatter_drop_keys": [
|
|
"source_evidence",
|
|
"curation_note",
|
|
"content_curator",
|
|
"transfer_test",
|
|
"transfer_test_notes",
|
|
"naming_note",
|
|
"last_verified",
|
|
"structure"
|
|
],
|
|
"internal_path_globs": [
|
|
"*.internal.*",
|
|
"**/internal/**",
|
|
"*-internal/**"
|
|
],
|
|
"section_fence": {
|
|
"begin": "<!-- internal:begin -->",
|
|
"end": "<!-- internal:end -->"
|
|
},
|
|
"allowed_context_substrings": [
|
|
"deprecated",
|
|
"defunct",
|
|
"do not ship",
|
|
"internal-only (example)"
|
|
],
|
|
"allowed_context_lines": [
|
|
" `<launch cwd>/.openrig/compaction/preparation/<session>/<attempt>/RESTORE-MAP.md`; its parent",
|
|
"OpenRig uses `<cwd>/.openrig/compaction/preparation/`, falling back to its instance home when"
|
|
]
|
|
}
|