.env.example

# Copy to .env for local deployment (never commit real secrets).
# Licensing env vars: docs/LICENSING_SPEC.md, docs/RELEASE_INTEGRITY.md

# ANTI-PATTERN (#719): DATA_BOAR_ENV=development / DEBUG=1 in production.
# These vars no longer affect licensing (the tier override was removed), but
# leaving debug flags on in production weakens logging hygiene. Enforcement is
# governed ONLY by licensing.mode + a valid signed license; without one the
# runtime fails CLOSED (scans denied, tier capped to Community).
# DATA_BOAR_LICENSE_MODE=open cannot downgrade YAML "mode: enforced".

# Optional hex SHA-256 — must match core/licensing/_build_digest.txt in the running image.
# Generate locally: uv run python scripts/generate_build_digest.py
# Release builds: see build-digest.txt on the GitHub Release (SBOM workflow).
# DATA_BOAR_EXPECTED_BUILD_DIGEST=

# Optional per-file SHA-256 manifest (Enterprise enforced mode).
# Generate locally: uv run python scripts/generate_release_manifest.py
# Release builds: see release-manifest.json on the GitHub Release (SBOM workflow).
# DATA_BOAR_RELEASE_MANIFEST_PATH=