diff --git a/.gitignore b/.gitignore
index 01965f8b..ab599b6e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,6 +17,12 @@ build/
 # Local source-transfer archives; preserve them outside version control.
 /frontend-src.tar.gz
 
+# Local AI/agent working inputs are never repository content. Historical
+# tracked files under this path are being removed separately from the hardening
+# branch; keep the guard so cross-project archives and generated DB/WAL/contact
+# sheets cannot return.
+/.codex-input/
+
 # Large local data
 /artifacts/*
 !/artifacts/evidence/