
__pycache__/
.onpar/
.DS_Store
.pytest_cache/
.ruff_cache/
.serena/
.venv/
*.egg-info/
*.py[cod]
*.sqlite
# local state — captured traffic and eval sets never get committed.
# `onpar observe` defaults its capture log to ./onpar-captures.log, so a user
# who runs it inside a repo would otherwise be one `git add -A` from committing
# their own traffic. Redaction happens before persistence (NFR-3), but redacted
# is not the same as publishable.
onpar-captures.log
*-captures.log
# ...and no key/credential material derived from a capture session either.
# ...and the key that decrypts them. `onpar observe` writes this beside the log
# on first run. It was committed once, by a `git add -A` after the gateway was
# started by accident — caught in review, never on main. A capture log without
# its key is ciphertext; with it, it is the customer's traffic.
onpar-captures.key
*-captures.key
*.key
# Rust
build/
dist/
target/
temp/
uv.lock

# `onpar kernel` scaffolds a plugin package into the cwd. Running it from the
# repo root during a check should never commit the output.
/*-kernel/
/fused-*/
