secret/harness.config.json at main · dancinlab/secret · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
{
  "project": "secret",
  "profile": "hardcore",
  "stack": [
    "generic"
  ],
  "lockdown": {
    "files": [
      "bin/secret"
    ],
    "fromMarkdown": "CLAUDE.md",
    "onEditReminder": "L0 file edited (bin/secret credential core) — update CHANGELOG.jsonl in the same change."
  },
  "enforcementFile": ".harness/enforcement.json",
  "keywordsFile": ".harness/keywords.json",
  "severityMapFile": ".harness/severity-map.json",
  "verify": {
    "checks": [
      {
        "id": "syntax",
        "cmd": "bash -n bin/secret",
        "timeoutMs": 30000
      },
      {
        "id": "get-output",
        "cmd": "bash tests/get-output.sh",
        "timeoutMs": 30000
      }
    ]
  },
  "lint": {
    "freshnessFiles": [],
    "changelog": {
      "file": "CHANGELOG.jsonl",
      "triggerPattern": "(^|/)bin/secret$",
      "ignore": [
        "(^|/)(tests?|__tests__|spec)/",
        "\\.(test|spec)\\.[a-z]+$",
        "(^|/)\\.harness(-engine)?/"
      ]
    },
    "protectedBranches": [
      "main",
      "master"
    ]
  },
  "docs": {
    "architecture": "ARCHITECTURE.md",
    "log": "CHANGELOG.jsonl",
    "scratchDir": "scripts/scratch",
    "scopeDirs": [
      ""
    ],
    "allow": [
      "README.md",
      "CHANGELOG.jsonl",
      "ARCHITECTURE.md",
      "tests/get-output.sh",
      "CLAUDE.md",
      "AGENTS.md",
      "LICENSE",
      "CONTRIBUTING.md",
      "SECURITY.md"
    ]
  },
  "guides": [
    "CLAUDE.md",
    "AGENTS.md",
    "README.md"
  ],
  "ledger": {
    "staleSec": 1800
  }
}