# Secrets and local configuration
.env
.env.*
!.env.example
*.pem
*.key
*.pfx
*.p12
*.crt
secrets/
credentials/

# Machine-local agent execution policy (tracked agent docs/skills remain intentional)
.codex/config.toml
.codex/config.local.toml
.claude/

# IDE / OS
.vscode/
.idea/
.vs/
.DS_Store
Thumbs.db
*.swp

# Node / frontend
node_modules/
coverage/
playwright-report/
test-results/
.next/
dist/
.npm/
.pnpm-store/

# Go
bin/
*.test
*.out
vendor/

# Python
__pycache__/
*.py[cod]
.pytest_cache/
.venv/

# Databases / runtime
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite-shm
*.sqlite-wal
tmp/
.cache/
data/
backups/local/

# Generated heavy evidence
artifacts/evidence/**/*.mp4
artifacts/evidence/**/*.webm
artifacts/evidence/**/*.zip
artifacts/evidence/**/*.tar
artifacts/evidence/**/*.gz

# Keep intentional evidence summaries, structured output and reviewed images
!artifacts/evidence/**/summary.md
!artifacts/evidence/**/*.json
!artifacts/evidence/**/*.txt
!artifacts/evidence/**/*.png
!artifacts/evidence/**/*.svg

# Local scratch
_to_delete/
artifacts/_audit_tmp/
.playwright-mcp/