{
  "_comment": "Shared secretlint config for mandrel-platform consumers — the single source of truth for the LOCAL pre-commit secret-scan mirror of the CI gitleaks tiers (shift-left dev-experience). secretlintrc has NO native file-level `extends`, so consumers reference this base instead of hand-copying the ruleset: point the husky pre-commit hook at it directly (`secretlint --secretlintrc node_modules/mandrel-platform/config/secretlint.base.json`) or import + spread it into a JS-module `.secretlintrc.mjs` layering only genuine repo-specific overrides. See README § secretlint.base.json for the adoption pattern. The husky hook *wiring* stays consumer-local; the *ruleset* is single-sourced here so a rule change lands fleet-wide in one place.",
  "rules": [
    {
      "id": "@secretlint/secretlint-rule-preset-recommend"
    }
  ]
}