Adds four exception-register entries for standing deviations found by
the 2026-10-12 repository audit:
- **EX-0009**: GitFlow with merge commits (K22-REPO-20 linear history,
K22-REPO-22 squash only) for Website-Backend, Website-Frontend, Munitor
and cluster-gitops. Munitor's release and deploy pipeline depends on
develop/main ancestry. cluster-gitops image bumps are now GitHub-signed
GraphQL commits with no ruleset bypass actor.
- **EX-0010**: CircleCI (Munitor orb) instead of the GitHub Actions
reusable-workflow gates (K22-CI-01, 10-24, 30) for Website-Backend,
Website-Frontend and Munitor. The CircleCI checks are required by
rulesets.
- **EX-0011**: 2-space formatting (K22-CODE-TS-01, K22-CODE-SH-02) in
Website-Frontend (Prettier + eslint-config-next) and Munitor (Bash). A
reformat would trigger releases; the repositories' `.editorconfig` cites
this ID.
- **EX-0012**: Praetor commits git-crypt-encrypted local OpenTofu state
and tfvars (K22-CODE-TF-04/05). This is the bootstrap/recovery path for
the infrastructure that would host a remote backend.
No exception is needed for the munitor-ci bot's unsigned pushes, because
that is fixed: Munitor now commits through `createCommitOnBranch`, so
the commits are signed.
AI disclosure: drafted by Claude Code (Claude Opus 5.5) at the
maintainer's direction.
Generated with [Claude Code](https://claude.com/claude-code)
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
james.maesandClaude Opus 5.5
c95e9e298c