# Gitleaks allowlist — false-positive fingerprints with justification.
# Each entry: <relative-path>:<rule-id>:<line>
# Justify why each entry is safe to ignore.

# LAN IP (RFC1918) for nullstone in a Pi-hole local-DNS-pin description.
# Same IP appears openly in docs/00-overview.md (Topology table), 21-*,
# 22-*, etc. — internal LAN only, never routed publicly. Rule itself
# is tagged low-confidence and explicitly suggests allowlisting docs.
docs/32-dev-container-wipe-2026-05-11.md:lan-ip-rfc1918:71