This commit is contained in:
1 parent
646ba3be81
commit
aae5b73581
14 files changed
+883
-142
No files matched your search
@@ -0,0 +1,9 @@
|
||||
# Private configuration
|
||||
|
||||
`config.toml` is private and must remain secret from coding agents.
|
||||
|
||||
- Never open, read, search, copy, print, diff, or otherwise inspect that file's contents with agent tools or helper scripts.
|
||||
- Exclude it explicitly from repository searches, even when searching ignored files.
|
||||
- The application may load its private configuration internally during user-authorized runs; this does not authorize displaying or inspecting the configuration or credentials. Use isolated tests with synthetic configuration and credentials for unit verification.
|
||||
- Make configuration changes only in `config.example.toml`; the user maintains the private file.
|
||||
- Do not inspect or log credentials, runtime session cookies, or authentication tokens. The user permits inspecting API/chart response data for debugging.
|
||||
Reference in new issue
Block a user