/** * SMI-4396: Allowlist test matrix. * * Covers: * - FP-only allowlisted skill passes (not quarantined) * - Allowlisted + unrelated CRITICAL still quarantines (genuine attack leaks through) * - Expired entry behaves as absent (fail-safe to quarantine) * - Backward-compat: shouldQuarantine(report) without allowlist arg matches prior semantics * - Score-only quarantine (risk >= threshold without any critical/high) still works * - Load-time ReDoS validation rejects nested quantifiers + unbounded wildcards * - matchField='location' matches raw UTF-8 bytes where matchField='message' cannot * - Schema validation rejects malformed entries (missing fields, bad dates, unknown matchField) * - Scanner integration — loadAllowlist returns EMPTY_ALLOWLIST for missing file */ export {}; //# sourceMappingURL=allowlist.test.d.ts.map