igneum/tools/ci/forbidden-strings.txt
igneum-labs 70bed1065a CI on every push: igneum-pow tests, census build, simulator quick modes, site build + link check, identity grep
GitHub Actions workflow (.github/workflows/ci.yml) on push and pull_request with three jobs on the free runners:
igneum-pow `cargo test --release` and the igneum-census build; the two Python simulators' --quick modes under a
120-second timeout; the site build, an internal link check of site/*.html (tools/ci/link-check.mjs) and a gh-free
identity grep of the public export list (tools/ci/identity-check.sh over tools/ci/forbidden-strings.txt: machine
names, LAN and overlay addresses, home paths, local time zones, the log-intake key pattern; never a key or a name).
The node fork is too big for CI today and the workflow says so.

sim/finality_v2.py --quick is now a genuine smoke run (one day or hour per scenario, one partition and one eclipse
setting): 149 s at nice 19 on a loaded Mac, was 745 s. sim/difficulty/sim.py gains --quick (up50 and warmup-hard,
kaspa and igneum controllers, 36 s). One bench-log time-zone label reworded so the identity grep passes.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-04 09:57:34 +00:00

20 lines
736 B
Text

# Patterns that must never appear in the public export (grep -E, one per line, # comments ignored).
# This is the committed, non-secret subset of the public mirror's identity list (igneum-public/tools/identity.local,
# which stays private because its remaining entries would themselves name what must stay out). Machine names, LAN
# and overlay addresses, home paths, local time zones and the log-intake key pattern. Never a key, never a name.
# Checked by tools/ci/identity-check.sh over the export list of igneum-public/tools/sync.sh after its generic scrub.
DESKTOP-[A-Z0-9]{7}
MacBook
192\.168\.
100\.[0-9]+\.[0-9]+\.[0-9]+
\+0100
\bBST\b
/Users/
C:\\Users
~/Desktop
log-intake
LOG_INTAKE
intake[_-]?key
Tailscale
tailscale
ts\.net