allowlist: own-home AUTO_RUN for coreci-cpo + coreci-cairo (onboarding step 5; enables first-run acceptance jobs)

2026-10-04 04:59:37 +00:00
parent 3e9caa9ac6
commit 2446f50fb1
1 changed files with 15 additions and 5 deletions
@@ -1,15 +1,25 @@
 version: 1
 defaults:
-  decision: NEEDS_APPROVAL        # fail-closed: anything not explicitly allowed
+  decision: NEEDS_APPROVAL
  timeout_s: 900
 agents:
-  coreci-coo:                     # COO's own home-repo packs run unattended
+  coreci-coo:
    kinds:
      bash_pack:
        auto_run_targets:
-          - coreci-coo/home       # PARA syncs, ops-alerts appends
-  coreci-executor:                # executor's own config repo (audit commits)
+        - coreci-coo/home
+  coreci-executor:
    kinds:
      bash_pack:
        auto_run_targets:
-          - coreci/executor-config
+        - coreci/executor-config
+  coreci-cpo:
+    kinds:
+      bash_pack:
+        auto_run_targets:
+        - coreci-cpo/home
+  coreci-cairo:
+    kinds:
+      bash_pack:
+        auto_run_targets:
+        - coreci-cairo/home