skip_list: - run-once - var-naming[no-role-prefix] # user-facing API dicts (cis, system, hypervisor) are intentionally not role-prefixed exclude_paths: - roles/global_defaults/