[neamul602]

Publishes the bypass list as @Warhammer4000 signed it off on #338.

• Opens with the threat model: file DLP stops accidental leaks, not a determined insider. Nobody should read it as "blocks all exfiltration".
• Where it runs today, so the list isn't read as more than it is: Linux in audit-only mode, plus the manual upload proxy. Windows and macOS not yet.
• Every row with its signed-off status. MTP phones, WSL and VMs are "Later" with their stop-gap named next to them; MTP's is BrainStation-23/Compliance-OS#576, since no current control blocks MTP. Email is "Partly"; images and scans are "Later (needs OCR)".
• The admin tampering row is held back until the health alert (BrainStation-23/Compliance-OS#525) exists, as the sign-off asks.
• The re-review rule, with the date of the last review.

The console page (BrainStation-23/Compliance-OS#523) should use the same list.

Docs only, so skip-changelog.

Refs #338

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 8efda032-ca00-41b3-8d95-b402f6a20ad1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn