pi-agent-config

T

Kai 734e63aa28 fix(verify-no-secrets): resolve repo root via git, allow scaffolding under secrets/

Two defects found by testing the guard against itself:

1. When invoked through the .git/hooks/pre-commit symlink, deriving the repo
   root from dirname(BASH_SOURCE)/.. resolved to .git/ instead of the work
   tree, so the hook scanned nothing and never blocked. Use
   'git rev-parse --show-toplevel' instead.

2. The blanket secrets/ rule rejected secrets/.gitkeep. Replaced with an
   explicit allowlist: .gitkeep, README.md, *.example, *.template.

Verified: a staged file containing a Telegram bot token now aborts the commit
and leaves HEAD unchanged.

2026-08-26 22:48:54 -07:00

docs

docs: pi 0.84.3 runtime mechanics, isolation baseline, personality layering, gateway patterns

2026-08-26 22:47:53 -07:00

scripts

fix(verify-no-secrets): resolve repo root via git, allow scaffolding under secrets/

2026-08-26 22:48:54 -07:00

secrets

docs: pi 0.84.3 runtime mechanics, isolation baseline, personality layering, gateway patterns

2026-08-26 22:47:53 -07:00

.gitignore

docs: pi 0.84.3 runtime mechanics, isolation baseline, personality layering, gateway patterns

2026-08-26 22:47:53 -07:00