The screenshot names remain bounded in reachable history and absent from the current public tree. Source-Sha: c357423ec432febcfce49adb42b863ee1a309b99 Policy-Sha: c357423ec432febcfce49adb42b863ee1a309b99 Tree-Digest: 2c39e139c90830e419de6510b326b6de9be288d4f5121c94cfb921734f815d55
86 lines
2.6 KiB
JSON
86 lines
2.6 KiB
JSON
{
|
|
"schema_version": 2,
|
|
"repository": "Fimeg/RedFlag",
|
|
"_note": "The exact authority for what may cross into the public projection. Every candidate path must be named in path_manifest; changing either file is a public-surface decision.",
|
|
"path_manifest": ".publication/paths.txt",
|
|
"exclude": [
|
|
".publication/evidence/github-break-glass-2026-09-04.json",
|
|
"RAF/components/06-session-broker.md",
|
|
"RAF/flows/03-agent-upgrade.md",
|
|
"scripts/generate-keypair.go"
|
|
],
|
|
"history_only": [
|
|
"Screenshots/7Zip-Updates-RedFlag-Dependency.png",
|
|
"Screenshots/RedFlag Agent List.png",
|
|
"Screenshots/RedFlag Default Dashboard.png",
|
|
"Screenshots/RedFlag Docker Dashboard.png",
|
|
"Screenshots/RedFlag Heartbeat System.png",
|
|
"Screenshots/RedFlag History Dashboard.png",
|
|
"Screenshots/RedFlag Linux Agent Details.png",
|
|
"Screenshots/RedFlag Live Operations - Failed Dashboard.png",
|
|
"Screenshots/RedFlag Updates Dashboard.png",
|
|
"Screenshots/RedFlag Windows Agent Details.png",
|
|
"Screenshots/Upstream-Version-Tracking.png"
|
|
],
|
|
"review_required": [
|
|
"RAF/README.md",
|
|
"RAF/components/04-helper.md",
|
|
"RAF/components/05-desktop.md",
|
|
"RAF/core/02-architecture-decisions.md",
|
|
"RAF/flows/06-update-lifecycle.md",
|
|
"RAF/security/01-trust-boundaries.md"
|
|
],
|
|
"forbidden": [
|
|
"rescue",
|
|
".handoff-from-phone"
|
|
],
|
|
"forbidden_classes": [
|
|
"rescue/*",
|
|
"handoff/*",
|
|
".handoff*",
|
|
"transcripts/*",
|
|
"sessions/*",
|
|
"*.log",
|
|
"*.jsonl",
|
|
"*.bak",
|
|
"*.old",
|
|
"*.orig",
|
|
"*.rej",
|
|
"*-copy-*",
|
|
"*__pycache__*",
|
|
"*.pyc"
|
|
],
|
|
"max_blob_bytes": 2097152,
|
|
"exceptions": [
|
|
{
|
|
"path": "web/src/pages/Agents.test.tsx",
|
|
"rule": "rfc1918",
|
|
"reason": "documentation-range fixture addresses in a unit test, not topology",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": "AUTHOR.md",
|
|
"rule": "internal-email",
|
|
"reason": "deliberate public contact address for the project author",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": "SECURITY.md",
|
|
"rule": "internal-email",
|
|
"reason": "deliberate public security-report address",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": ".publication/surface_gate.py",
|
|
"rule": "internal-host",
|
|
"reason": "the public gate must name the forbidden pattern it enforces",
|
|
"reviewed": "2026-09-08"
|
|
},
|
|
{
|
|
"path": "scripts/check-public-history.sh",
|
|
"rule": "internal-host",
|
|
"reason": "the public history gate must name the forbidden pattern it enforces",
|
|
"reviewed": "2026-09-08"
|
|
}
|
|
]
|
|
}
|