fix(security): remove insecure policy and optimize repo hygiene

mios-dev · web-flow · commit fece67b81f82 · 2026-04-30T08:05:19.000Z
diff --git a/.gitignore b/.gitignore
@@ -81,3 +81,13 @@ agents/**/latest-context.json.gz
 **/*.pyc
 **/.DS_Store
 **/Thumbs.db
+
+# MiOS Runtime/Build Artifacts
+logs/
+*.log
+/artifacts/*.gz
+/artifacts/*.iso
+/artifacts/*.qcow2
+/artifacts/*.vhdx
+/artifacts/*.xz
+/artifacts/*.raw
diff --git a/etc/containers/policy.json b/etc/containers/policy.json
diff --git a/usr/lib/sysusers.d/50-mios-ai.conf b/usr/lib/sysusers.d/50-mios-ai.conf
@@ -0,0 +1,4 @@
+# MiOS AI Service User
+u mios-ai - "MiOS AI Service User" /var/lib/mios/ai /sbin/nologin
+m mios-ai video
+m mios-ai render
