# In-process channel adapter allowlist (sidecar-first policy).
#
# LibreFang is sidecar-first: new channels ship as out-of-process
# sidecar adapters (see docs / the `librefang.sidecar.adapters.*`
# modules in the SDK / `examples/sidecar-channel-python/adapter.py`
# for a generic template).
# This file grandfathers the in-process adapters that predate the
# policy. The pre-commit hook and `cargo xtask channel-policy` (run in
# CI on every PR) reject any file under
# crates/librefang-channels/src/{<name>.rs, <name>/*.rs} containing
# `ChannelAdapter for` whose basename is NOT listed here.
#
# Known, accepted limitation: a macro-generated impl, or a new adapter
# impl added inside an already-allowlisted file, is not detected. This
# is a policy ratchet, not a security boundary.
#
# This list only ever SHRINKS: when an adapter is migrated to a
# sidecar and its module deleted, remove its name here so it can
# never be reintroduced in-process. Adding a name back requires
# explicit maintainer approval — it is not routine.
#
# One basename per line, no `.rs`. Keep sorted.
sidecar
