smolkik_adm/RuView
1
0
Fork 0
mirror of https://github.com/ruvnet/RuView.git synced 2026-08-30 20:15:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/main' into resolve-1579-conflict

Browse Source 
# Conflicts:
#	docs/adr/README.md
This commit is contained in:
ruv
2026-08-11 13:04:00 -04:00
parent 5aa204a168 90c6ecc530
commit ba978041ae
309 changed files with 20764 additions and 1222 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
scripts/csi-data-policy-check.sh
View File

@@ -1,8 +1,8 @@
#!/usr/bin/env bash
#
# csi-data-policy-check.sh — ADR-296 CSI data-incident repository guard.
# csi-data-policy-check.sh — ADR-299 CSI data-incident repository guard.
#
# WHY (ADR-296): raw CSI recordings are person data (they encode breathing,
# WHY (ADR-299): raw CSI recordings are person data (they encode breathing,
# movement, and presence) and CLAUDE.md prohibits committing CSI or person
# data. A stale `.gitignore` rule let ~64.6 MB of raw captures reach the tree
# under `data/recordings/` and `v2/data/recordings/`. This check is the
@@ -30,7 +30,7 @@
# ------------------------------------------------------------------------------
# ALLOWLIST (synthetic test fixtures)
# ------------------------------------------------------------------------------
# Tests may use only synthetic or expressly-consented minimal fixtures (ADR-296).
# Tests may use only synthetic or expressly-consented minimal fixtures (ADR-299).
# A file whose path matches an allow pattern is exempt. Patterns come from:
# * the file `scripts/csi-data-policy.allow` (one glob per line, `#` comments), and
# * the env var `CSI_POLICY_ALLOW` (colon-separated globs).
@@ -38,11 +38,11 @@
# scripts/tests/fixtures/csi-policy/*.csi.jsonl
#
# ------------------------------------------------------------------------------
# BASELINE (acknowledged pre-existing incident, ADR-296)
# BASELINE (acknowledged pre-existing incident, ADR-299)
# ------------------------------------------------------------------------------
# The tree today ALREADY contains the incident recordings under
# `data/recordings/` and `v2/data/recordings/`. Removing them is destructive and
# gated on data-owner sign-off (ADR-296 "Decision"), so this guard is EXPECTED to
# gated on data-owner sign-off (ADR-299 "Decision"), so this guard is EXPECTED to
# fail on the current tree — that failure documents the incident.
#
# Once the owner removes those files, or to acknowledge them in the interim
@@ -160,7 +160,7 @@ scan_stdin() {
continue # synthetic fixture, expressly allowed
fi
if matches_any "$f" BASELINE_PATTERNS; then
echo "ack: $f — $reason (acknowledged baseline, ADR-296)" >&2
echo "ack: $f — $reason (acknowledged baseline, ADR-299)" >&2
acknowledged=$((acknowledged + 1))
continue
fi
@@ -169,14 +169,14 @@ scan_stdin() {
done
if [[ "$acknowledged" -gt 0 ]]; then
echo "note: $acknowledged file(s) acknowledged via CSI_POLICY_BASELINE (ADR-296)." >&2
echo "note: $acknowledged file(s) acknowledged via CSI_POLICY_BASELINE (ADR-299)." >&2
fi
if [[ "$violations" -gt 0 ]]; then
echo "" >&2
echo "FAIL: $violations CSI/person-data policy violation(s) (ADR-296)." >&2
echo "FAIL: $violations CSI/person-data policy violation(s) (ADR-299)." >&2
echo " Raw CSI is person data and must not be tracked in git. See" >&2
echo " docs/adr/ADR-296-csi-data-incident-repo-controls.md." >&2
echo " docs/adr/ADR-299-csi-data-incident-repo-controls.md." >&2
echo " Synthetic test fixtures can be allowlisted in $ALLOW_FILE." >&2
return 1
fi

4
scripts/csi-data-policy.allow
View File

@@ -1,10 +1,10 @@
# csi-data-policy.allow — ADR-296 synthetic-fixture allowlist.
# csi-data-policy.allow — ADR-299 synthetic-fixture allowlist.
#
# One shell glob per line (repo-relative paths). `#` starts a comment; blank
# lines are ignored. A tracked/staged file whose path matches any pattern here
# is exempt from the CSI data-policy check (scripts/csi-data-policy-check.sh).
#
# ONLY synthetic or expressly-consented minimal fixtures belong here (ADR-296).
# ONLY synthetic or expressly-consented minimal fixtures belong here (ADR-299).
# Never allowlist a real capture to silence the guard — real CSI is person data.
# The CSI_POLICY_ALLOW env var appends extra patterns (colon-separated) for
# one-off/local use.