# Patterns that must never appear in the public export (grep -E, one per line, # comments ignored).
# This is the committed, non-secret subset of the public mirror's identity list (igneum-public/tools/identity.local,
# which stays private because its remaining entries would themselves name what must stay out). Machine names, LAN
# and overlay addresses, home paths, local time zones and the log-intake key pattern. Never a key, never a name.
# Checked by tools/ci/identity-check.sh over the export list of igneum-public/tools/sync.sh after its generic scrub.
# Not forbidden (decision of 5 October 2026): the registered address of Igneum Labs LTD, Innovation One, Dubai International
# Financial Centre (DIFC). It is the one location that may appear in public text. The founder and the earlier entity stay in
# the private list.
DESKTOP-[A-Z0-9]{7}
MacBook
192\.168\.
100\.[0-9]+\.[0-9]+\.[0-9]+
\+0100
\bBST\b
/Users/
C:\\Users
~/Desktop
log-intake
LOG_INTAKE
intake[_-]?key
Tailscale
tailscale
ts\.net
