mrcharles
95f475c2f9
Mechanically enforces the Agent Authority policy: blocks all modifying
operations (bash, edit, write, multiedit) until an active ticket is set
via: echo '#NNN' > .crush/active-ticket
Exempts read-only tools, ticket management (redmine-cli/discourse-cli),
repo hygiene (check-rules, shellcheck), and monitoring commands.
Also: un-ignore .crush/crush.json so the hook config is tracked in git.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
47 lines
921 B
Plaintext
47 lines
921 B
Plaintext
# Crush internal state (track crush.json config, ignore session data)
|
|
.crush/crush.db
|
|
.crush/crush.db-*
|
|
.crush/logs/
|
|
.crush/memory/
|
|
.crush/active-ticket
|
|
|
|
# OS/editor
|
|
.DS_Store
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
\#*\#
|
|
.\#*
|
|
|
|
# Python bytecode
|
|
__pycache__/
|
|
*.pyc
|
|
|
|
# Temporary files
|
|
*.tmp
|
|
*.bak
|
|
*.log.tmp
|
|
|
|
# LOGFILENAME artifacts: the framework (Logging.sh + PrettyPrint.sh) appends
|
|
# every print_info/print_error line to LOGFILENAME, defined as
|
|
# "$0.<Weekday>-YYYY-MM-DD-HH:MM:SS.$$". Running any script that sources the
|
|
# framework therefore drops a timestamped log file next to it.
|
|
*.Monday-*
|
|
*.Tuesday-*
|
|
*.Wednesday-*
|
|
*.Thursday-*
|
|
*.Friday-*
|
|
*.Saturday-*
|
|
*.Sunday-*
|
|
|
|
# Sensitive exports / runtime data
|
|
dns-cluster-setup/.export/
|
|
returned-logs/
|
|
|
|
# Kubernetes secrets (kubeconfig contains embedded client certs)
|
|
k8s/kubeconfig.yaml
|
|
k8s/*.token
|
|
|
|
# Pi-hole web UI password (real value only in on-box .env, never committed)
|
|
netinfra/pihole/.env
|