.guard-population-baseline.txt

# Frozen guard-population declarations. See docs/architecture/guard-population.md.
internal/cli/sync.go	persisted-sync-state-integrity	fail-closed	if	sha256:961d21c88476409d7a2ac2b4093f8aca96010d9d9bf6aa17ff71bed96d8ccc78	"legitimate persisted sync state is a missing file or decoded state with an empty or supported persona; read/decode errors, whitespace-only values, and unsupported persona values remain excluded"
internal/reviewtransaction/compact_store.go	authority-repair-removal	too-tight	if	sha256:8fbc83d3997de1e129ee32462480c6623f412968bfcb83eebc5bd0fde4d614d3	"legitimate repair removals may leave pre-existing unchanged graph defects but must not introduce or alter a defect"
internal/reviewtransaction/rar_path_safety_windows.go	shared-rar-owner	too-tight	return	sha256:99fefc7cd9233d1a311122d1af6d5bb9af0427e132d9cdbe6da41706f2733715	"legitimate shared RAR owners are the current user, token owner, BUILTIN Administrators, or LocalSystem; arbitrary owners remain excluded"
internal/reviewtransaction/secure_open_directory_darwin.go	darwin-search-ancestor	too-tight	return	sha256:10ddcebf7973a3f26fbd625660d8434e3872d50db036c716fcf933dbd42806f8	"legitimate ancestry includes search-only directories; opening must require execute permission without read permission"
internal/reviewtransaction/snapshot.go	nested-worktree-scope	too-tight	if	sha256:ad4fa4e6ec3b4415c117f24b8b9886fe05f5bde2f76a8ace65d0fe4b83b4cd26	"legitimate opaque nested repositories are Git-registered linked worktrees; unregistered embedded repositories remain excluded"