# Leak Guard allowlist — exact, known-safe literal tokens that the tier-2
# shape detectors would otherwise flag. One token per line; '#' starts a
# comment. Keep this to genuinely public/example values only.
#
# For a one-off vetted fixture line, prefer the inline escape hatch instead:
# add `leak-guard:allow` in a comment on that line.

# Canonical AWS documentation example access key (not a real credential).
AKIAIOSFODNN7EXAMPLE

# GitHub's public bot address in the sign-off trailer of Dependabot commits.
support@github.com

# OpenSSH certificate key-type identifiers (protocol constants, not addresses).
ssh-ed25519-cert-v01@openssh.com
sk-ssh-ed25519@openssh.com

# Synthetic ids in the Team Vault cross-implementation test vectors and the
# vault/CA unit tests. The vectors are signed over these exact values, so they
# cannot carry an inline marker or be rewritten.
0b6b1f3e-2c4d-4e5f-8a9b-0c1d2e3f4a5b
1c7c2f4f-3d5e-4f60-9bac-1d2e3f4a5b6c
3f0c8d2a-9b1e-4c6f-8d7a-5e4b3c2a1f00
5a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d
7c9e6679-7425-40de-944b-e07fc1f90ae7
9d8c7b6a-5f4e-4d3c-ab2a-190817263544
c2a4e6f8-1b3d-4f5a-9c7e-0a2b4c6d8e1f
e1d2c3b4-a596-4877-8695-a4b3c2d1e0f9
11111111-1111-1111-1111-111111111111
11111111-1111-4111-8111-111111111111
22222222-2222-2222-2222-222222222222
22222222-2222-4222-8222-222222222222
33333333-3333-4333-8333-333333333333
44444444-4444-4444-8444-444444444444
55555555-5555-4555-8555-555555555555
