feat: project scaffold, unified Pydantic schema, scope gating

2026-06-29 17:35:50 -04:00
commit 1f531e4948
9 changed files with 1239 additions and 0 deletions
@@ -0,0 +1,17 @@
+# recon-triage scope file — AUTHORIZED TARGETS ONLY.
+#
+# Only assets listed here are touched. Anything resolving outside these rules is
+# dropped with a logged warning and never scanned. out_of_scope takes precedence.
+#
+# Domain rules match subdomains: "example.com" also covers "api.example.com".
+
+in_scope_domains:
+  - example.com
+
+in_scope_cidrs:
+  - 93.184.216.0/24
+
+out_of_scope:
+  # Exclude specific hosts or sub-ranges even if they fall under an in-scope rule.
+  - internal-only.example.com
+  - 93.184.216.200/30