From e77e53db8e70c9ceccdd7bd06ecf8075290b1acc Mon Sep 17 00:00:00 2001
From: itdove <dvernier@redhat.com>
Date: Mon, 27 Jul 2026 08:49:32 -0400
Subject: [PATCH] Configure ai-guardian

---
 .ai-guardian/ai-guardian.json      | 13 +++++++++++++
 .ai-guardian/ai-guardian.json.lock |  0
 .aiguardignore.toml                |  5 +++++
 README.md                          |  2 +-
 demos/DEMO_MVP.md                  |  2 +-
 5 files changed, 20 insertions(+), 2 deletions(-)
 create mode 100644 .ai-guardian/ai-guardian.json
 create mode 100644 .ai-guardian/ai-guardian.json.lock
 create mode 100644 .aiguardignore.toml

diff --git a/.ai-guardian/ai-guardian.json b/.ai-guardian/ai-guardian.json
new file mode 100644
index 0000000..13d3fbd
--- /dev/null
+++ b/.ai-guardian/ai-guardian.json
@@ -0,0 +1,13 @@
+{
+  "prompt_injection": {
+    "allowlist_patterns": [
+      "__init__",
+      "__import__",
+      "__class__",
+      "__globals__",
+      "__builtins__",
+      "__mro__",
+      "__subclasses__"
+    ]
+  }
+}
diff --git a/.ai-guardian/ai-guardian.json.lock b/.ai-guardian/ai-guardian.json.lock
new file mode 100644
index 0000000..e69de29
diff --git a/.aiguardignore.toml b/.aiguardignore.toml
new file mode 100644
index 0000000..c5ab41d
--- /dev/null
+++ b/.aiguardignore.toml
@@ -0,0 +1,5 @@
+[allowlist]
+paths = [
+    "tests/unit/test_git_interface.py",
+    "tests/unit/test_sync_git.py",
+]
diff --git a/README.md b/README.md
index 54e3b0b..55ccf10 100644
--- a/README.md
+++ b/README.md
@@ -153,7 +153,7 @@ Lore uses [sqlite-vec](https://github.com/asg017/sqlite-vec) for SQL-level cosin
 brew install sqlite
 LDFLAGS="-L$(brew --prefix sqlite)/lib" \
 CPPFLAGS="-I$(brew --prefix sqlite)/include" \
-PYTHON_CONFIGURE_OPTS="--enable-loadable-sqlite-extensions" \
+PYTHON_CONFIGURE_OPTS="--enable-loadable-sqlite-extensions" \  # ai-guardian:allow
 pyenv install 3.12 --force
 ```
 
diff --git a/demos/DEMO_MVP.md b/demos/DEMO_MVP.md
index 8b6fcd5..bd44920 100644
--- a/demos/DEMO_MVP.md
+++ b/demos/DEMO_MVP.md
@@ -155,7 +155,7 @@ With Ollama enabled:
 > **macOS (pyenv) note:** To enable native sqlite-vec support, rebuild Python with SQLite extension loading:
 > ```bash
 > brew install sqlite3
-> PYTHON_CONFIGURE_OPTS="--enable-loadable-sqlite-extensions" \
+> PYTHON_CONFIGURE_OPTS="--enable-loadable-sqlite-extensions" \  # ai-guardian:allow
 > LDFLAGS="-L$(brew --prefix sqlite3)/lib" \
 > CPPFLAGS="-I$(brew --prefix sqlite3)/include" \
 > pyenv install 3.12.11 --force