# Reviewed noncredential schema declaration and deterministic test inputs only.
[extend]
useDefault = true
[[allowlists]]
description = "Pydantic enrollment secrets container declaration, no secret value"
paths = ['backend/app/schemas/enrollment\.py$']
regexTarget = "line"
regexes = ['secrets: EnrollmentSecretsV1 = EnrollmentSecretsV1\(\)']
[[allowlists]]
description = "Synthetic noncredential test encryption key and idempotency/reason fixtures"
paths = ['backend/tests/test_(repopulse_adoption_runner|deployment_control_plane|enrollment_plane|mcp_rag_n8n_integrations)\.py$']
regexTarget = "line"
regexes = ['appops-test-key-with-at-least-32-bytes', 'apply-wsbc-(direct|evidence)-0001', 'enroll-wsbc-(interrupted|compensate)-0001', 'N8N-REASON-SYNTHETIC']