diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..6647386
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,8 @@
+[extend]
+path = "/Library/Development/CircuitForge/circuitforge-hooks/gitleaks.toml"
+
+[allowlist]
+description = "linnet: tests/test_tiers.py contains obviously fake test license keys (CFG-LNNT-AAAA-BBBB-CCCC, CFG-LNNT-DEAD-BEEF-0000, etc.) — not real credentials"
+paths = [
+  '''tests/test_tiers\.py''',
+]