[HaoZeke]

What and why

llms-full.txt generation hits this line when the allowlist is empty:

leakguard: llms-full.txt links to AGENTS.md (https://github.com/HaoZeke/eb-stack/blob/main/AGENTS.md); allowlist the URL in scripts/leakguard.toml or drop the link

The manual index publishes that URL.
scripts/leakguard.toml allowlists it.
scripts/gen-llms-txt.py and the prek llms leakguard hook read that file.

Before and after

Before, an empty allowlist makes scripts/llms_leakguard.py exit 1 and print the line above.
scripts/gen-llms-txt.py exits 1 on the same line and does not write.

After, the URL is in scripts/leakguard.toml.
python3 scripts/llms_leakguard.py exits 0.
python3 scripts/gen-llms-txt.py rewrites nothing.
python3 scripts/gen-llms-txt.py --check exits 0.
uvx prek run -a exits 0, including llms leakguard.

Tests

cargo +stable fmt --all --check exited 0.
cargo +stable clippy --locked --all-targets -- -D warnings exited 0.
cargo +stable test --locked --all-targets exited 0.
1516 passed, 0 failed, 10 ignored.
tests/llms_txt.rs runs scripts/llms_leakguard.py and checks the allowlist URL.

---

Note

Low Risk
Docs and CI hook changes only; no runtime or auth behavior. Risk is limited to false positives blocking llms regeneration if new instruction links are added without updating the allowlist.

Overview
Adds a llms leakguard that blocks markdown links to AGENTS.md, CLAUDE.md, or GEMINI.md in generated or committed llms.txt / llms-full.txt unless the URL is listed in scripts/leakguard.toml.

scripts/gen-llms-txt.py runs that check on the rendered content before writing or --check, so generation fails with the same messages as the standalone script. A new prek local hook (llms-leakguard, always_run) runs scripts/llms_leakguard.py against the committed files; CHANGELOG.md documents both paths.

The manual’s existing AGENTS.md GitHub link is allowlisted so index generation and hooks pass without dropping discovery links. tests/llms_txt.rs asserts the allowlist entry and that llms_leakguard.py exits successfully.

^{Reviewed by Cursor Bugbot for commit a2bc888. Bugbot is set up for automated code reviews on this repo. Configure here.}