{
  "schemaVersion": 1,
  "trackedRoots": [
    "src",
    "recipes",
    "scripts",
    "tests",
    "config",
    "public",
    "schemas",
    ".storybook",
    ".gitea/workflows/quality-gates.yml",
    ".dependency-cruiser.json",
    ".nvmrc",
    ".npmrc",
    "eslint.config.ts",
    "index.html",
    "package.json",
    "pnpm-lock.yaml",
    "pnpm-workspace.yaml",
    "tsconfig.json",
    "tsconfig.app.json",
    "tsconfig.base.json",
    "tsconfig.node.json",
    "tsconfig.recipes.json",
    "tsconfig.service-worker.json",
    "tsconfig.test.json",
    "tsconfig.web-worker.json",
    "vite.config.ts",
    "vite.service-worker.config.ts",
    "vitest.config.ts",
    "playwright.config.ts",
    "playwright.capabilities.config.ts",
    "playwright.dev.config.ts",
    "playwright.storybook.config.ts",
    "playwright.visual.config.ts"
  ],
  "generatedRoots": ["dist", "artifacts/release"],
  "optionalRoots": ["artifacts/release"],
  "excludedPaths": [
    "tests/fixtures/security/secret-detection/forbidden"
  ],
  "allowlist": [
    {
      "path": "tests/fixtures/security/secret-detection/allowed/test-credentials.ts",
      "ruleId": "assigned-secret",
      "owner": "frontend-platform",
      "reason": "Synthetic credential verifies the scoped test-only allowlist.",
      "expiresAt": "2027-07-26T00:00:00.000Z"
    }
  ]
}