---
profile: production

# Exclude paths Ansible-lint should not check
exclude_paths:
  - .venv/
  - .collections/
  - .scaffold/
  - tests/integration/.run/   # transient harness run dir (gitignored, generated)
  - "**/vault.yml"  # ansible-vault encrypted — not lintable YAML

# Warn only (don't fail) on these rules during initial setup
# Remove entries as the codebase matures
warn_list:
  - experimental

# Skip rules that conflict with our conventions
skip_list: []

# Enforce FQCN for all builtin modules
use_default_rules: true