Add allowlist.yaml

2026-10-03 20:58:48 +00:00
commit 5a8e53d833
1 changed files with 15 additions and 0 deletions
@@ -0,0 +1,15 @@
+version: 1
+defaults:
+  decision: NEEDS_APPROVAL        # fail-closed: anything not explicitly allowed
+  timeout_s: 900
+agents:
+  coreci-coo:                     # COO's own home-repo packs run unattended
+    kinds:
+      bash_pack:
+        auto_run_targets:
+          - coreci-coo/home       # PARA syncs, ops-alerts appends
+  coreci-executor:                # executor's own config repo (audit commits)
+    kinds:
+      bash_pack:
+        auto_run_targets:
+          - coreci/executor-config