d175bc5f77
The final projection state matches the source-owned release and public-surface policy. Source-Sha: c1a84422a30a1dcf4ac9880a979de8fc6d4cb6c1 Policy-Sha: c1a84422a30a1dcf4ac9880a979de8fc6d4cb6c1 Tree-Digest: 13c2b0b731c29662c4909f73fc7246e8a0592c7e914fb8724d74594e38bebd69
73 lines
2 KiB
JSON
73 lines
2 KiB
JSON
{
|
|
"schema_version": 2,
|
|
"repository": "Fimeg/RedFlag",
|
|
"_note": "The exact authority for what may cross into the public projection. Every candidate path must be named in path_manifest; changing either file is a public-surface decision.",
|
|
"path_manifest": ".publication/paths.txt",
|
|
"exclude": [
|
|
".publication/evidence/github-break-glass-2026-09-04.json",
|
|
"RAF/components/06-session-broker.md",
|
|
"RAF/flows/03-agent-upgrade.md",
|
|
"scripts/generate-keypair.go"
|
|
],
|
|
"review_required": [
|
|
"RAF/README.md",
|
|
"RAF/components/04-helper.md",
|
|
"RAF/components/05-desktop.md",
|
|
"RAF/core/02-architecture-decisions.md",
|
|
"RAF/flows/06-update-lifecycle.md",
|
|
"RAF/security/01-trust-boundaries.md"
|
|
],
|
|
"forbidden": [
|
|
"rescue",
|
|
".handoff-from-phone"
|
|
],
|
|
"forbidden_classes": [
|
|
"rescue/*",
|
|
"handoff/*",
|
|
".handoff*",
|
|
"transcripts/*",
|
|
"sessions/*",
|
|
"*.log",
|
|
"*.jsonl",
|
|
"*.bak",
|
|
"*.old",
|
|
"*.orig",
|
|
"*.rej",
|
|
"*-copy-*",
|
|
"*__pycache__*",
|
|
"*.pyc"
|
|
],
|
|
"max_blob_bytes": 2097152,
|
|
"exceptions": [
|
|
{
|
|
"path": "web/src/pages/Agents.test.tsx",
|
|
"rule": "rfc1918",
|
|
"reason": "documentation-range fixture addresses in a unit test, not topology",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": "AUTHOR.md",
|
|
"rule": "internal-email",
|
|
"reason": "deliberate public contact address for the project author",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": "SECURITY.md",
|
|
"rule": "internal-email",
|
|
"reason": "deliberate public security-report address",
|
|
"reviewed": "2026-09-04"
|
|
},
|
|
{
|
|
"path": ".publication/surface_gate.py",
|
|
"rule": "internal-host",
|
|
"reason": "the public gate must name the forbidden pattern it enforces",
|
|
"reviewed": "2026-09-08"
|
|
},
|
|
{
|
|
"path": "scripts/check-public-history.sh",
|
|
"rule": "internal-host",
|
|
"reason": "the public history gate must name the forbidden pattern it enforces",
|
|
"reviewed": "2026-09-08"
|
|
}
|
|
]
|
|
}
|