.pii-allowlist

# Narrow allowlist for git-shield false positives in this repo.
# One regex per line. See https://github.com/vekexasia/git-shield#allowlist

# ── CSS hex color literals ──
# OPF extracts hex colors in two forms: '"#cc9166' (with leading quote) or
# 'C47A4F' (bare uppercase digits when the model drops the # prefix).
# Pattern: optional leading quote/hash, exactly 6 hex digits, optional trailing noise.
(?i)^["#]*[0-9a-f]{6}["#,]*$

# ── Public URLs that aren't PII ──
^https?://(www\.)?keepachangelog\.com(/.*)?$
^https?://(www\.)?nextjs\.org(/.*)?$
^https?://github\.com/vekexasia/tony-menu(\.git)?(/.*)?$
(?i)^tony-?menu$
# RFC 2606 reserved example domains used in test fixtures.
^https?://([a-z0-9-]+\.)*example\.(com|org|net)(/.*)?$
# test.local fake hostname used in worker integration tests.
^https?://test\.local(/.*)?$
test\.local

# ── Drizzle snapshot identifiers ──
# drizzle generates a fresh UUID for each migration snapshot's `id`/`prevId`.
# These appear in backend/drizzle/meta/*_snapshot.json and are not secrets.
^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

# ── Italian food / menu vocabulary in test fixtures + demo seed ──
# Dish, course, and translation names that the PII scanner mistakes for personal names.
(?i)^pizza\s+margherita$
(?i)^margherita$
(?i)^tiramis[uù]$
(?i)^cucina$
(?i)^antipasti$
(?i)^primi$
(?i)^secondi$
(?i)^dolci$
(?i)^bevande$
(?i)^vorspeisen$
(?i)^entr[ée]es$
(?i)^speisekarte$
(?i)^bruschetta$
(?i)^carpaccio$
(?i)^burrata$
(?i)^ravioli$
(?i)^spaghetti$
(?i)^branzino$
(?i)^tagliata$
(?i)^prosecco$
(?i)^merlot$
(?i)^carbonara$
# Italian regions used in custom-locale fixtures (not personal names).
(?i)^veneto$
(?i)^v[èe]neto$

# ── Italian admin UI strings in messages/it.json ──
# Verbs / labels that the PII scanner mistakes for personal names.
(?i)^riordina$
(?i)^salva$
(?i)^salvataggio$
(?i)^annulla$
(?i)^modifica$
(?i)^elimina$
(?i)^rimuovi$
(?i)^cambia$
(?i)^conferma$
(?i)^aggiungi$
(?i)^crea$
(?i)^nuova$
(?i)^nuovo$
(?i)^cerca$
(?i)^filtra$
(?i)^carica$
(?i)^caricamento$
(?i)^traduci$
(?i)^traduzione$
(?i)^traduzioni$
(?i)^ritraduci$
(?i)^mancanti$
(?i)^mancano$
(?i)^nascosti$
(?i)^nascosta$
(?i)^nascosto$
(?i)^visibili$
(?i)^esaurito$
(?i)^congelato$
(?i)^duplica$
(?i)^riprendo$
(?i)^pausa$
(?i)^completate?$
(?i)^completato$
(?i)^categoria$
(?i)^categorie$
(?i)^piatto$
(?i)^piatti$
(?i)^lingua$
(?i)^lingue$

# ── Multi-language admin UI strings (false-positive person matches) ──
(?i)^oberfl[äa]chensprache$
(?i)^hauptsprache$
(?i)^speisekarten?$
(?i)^prinzipale$
(?i)^prinsipale$
(?i)^principale$
(?i)^principal$
(?i)telefono
(?i)tełefono

# ── Diet / label vocabulary used in test fixtures and placeholder copy ──
# "Vegano" (IT/ES) and "Vegan" (EN/DE) are diet labels, not personal names.
(?i)^vegano?$
(?i)vegan(o|label|tag)?