.venv/
__pycache__/
*.pyc
node_modules/
.next/
dist/
build/
.env
.env.local
*.log
.claude/logs/
.claude/slots/
.DS_Store
Thumbs.db
.mypy_cache/
.pytest_cache/
.coverage
shadow_ai_grc.db
shadow-sec-ai.db
tmp_perf_probe*.py
mutants/

# Lint/build artifacts
lint_output.txt
frontend/lint_output.txt

# Backup files
*.bak

# Rust build artifacts
endpoint-agent/target/

# Unrelated external project (has its own git repo)
hunyuan-video/

# Session strays — user files / generated tmp, never tracked
*.pdf
fn-patches/
.audit_tmp/
.tmp_claude/

# User-submitted runtime data (PII-shaped, never tracked)
src/tpra/vendors/_user_submitted/

# Personal session memory
memory/

# Disabled hook backups (kept locally as reference)
.claude/hooks.disabled/

# SDK build/runtime artifacts
sdk/typescript/node_modules/
sdk/typescript/dist/
sdk/python/.coverage
sdk/python/.venv/

# Design handoff artifacts (one-off, archived locally)
Claudedesign/
*.egg-info/
.claude/worktrees/
.p1_passport_baseline.json
DALEEQ-handoff.zip

# Wave 0 T4 — Playwright screenshots and temp artifacts
tmp/

# P-GOLDEN B2 — FULL external academic corpora (InjecAgent + JailbreakBench).
# Samples stay committed (corpus/external/*_sample.jsonl); the FULL converted
# sets are local-only (large, regenerate via vendor_external --full-from-raw).
src/backend/benchmark/corpus/external/full/

# P-GOLDEN B2 layer-2 — LOCAL ONNX classifier weights for TWO independent models:
#   1. protectai/deberta-v3-base-prompt-injection-v2 (Apache-2.0) — ~739MB model.onnx
#      lives at the classifier/ root (src/backend/models/classifier/).
#   2. madhurjindal/Jailbreak-Detector via traromal/Jailbreak-Detector-ONNX
#      (MIT per HF model card; unconfirmed from vendored files) — ~263MB model.onnx
#      lives in the jailbreak/ subdir (src/backend/models/classifier/jailbreak/).
# Both are GITIGNORED and NEVER committed. The single rule below covers both.
# Download locally via services/ml_classifier.download_model(). The detector
# degrades gracefully when absent (deterministic regex layer is the always-on path).
src/backend/models/classifier/

# Dev SQLite DBs and backups (W9.5/W9.6 cleanup)
daleeq_dev.db
daleeq_dev.db.*
daleeq_dev.db-*
test.db
*.bak-*
shadow_ai_grc.db
.tmp_work/
.tmp_debug/

# Frontend build cache (regenerable)
frontend/.cache/

# graphify knowledge graph (regenerable, large)
graphify-out/
.env.bak*

# Rendered temp audit artifacts (scratch, regenerable)
docs/audits/.artifact-tmp/

# VULN-059: private keys / certs / keystores — NEVER commit secret material
*.pem
*.key
*.p12
*.pfx
*.crt
id_rsa
id_rsa.*

# Scratch striker/discovery drivers — carry live Venice key, NEVER commit (redteam C-finding 2026-07-08)
tests/redteam/_stage1_grounded_discovery.py
tests/redteam/_stage1_frames.json
tests/redteam/_stage2_grounded_exec.py
tests/redteam/_stage2_venice_exec.py
tests/redteam/_stage2_grounded_results.json
tests/redteam/_stage2_venice_results.json
tests/redteam/_stage2_venice_run.log
tests/redteam/_stage2_run.log
tests/redteam/_bench_*.py
tests/redteam/_bench_*.json
tests/redteam/_bench_*.log
tests/redteam/_qwen_selfdiscovered_frame.json
