__pycache__/
*.py[cod]
*$py.class
*.egg-info/
dist/
build/
.eggs/

.env
.env.local
*.pem
*.key

# Local secrets — copy from .example and fill with real values
docker/kafka-connect/secrets/postgres.properties
docker/kafka-connect/secrets/mysql.properties

.venv/
venv/
env/

.idea/
.vscode/
*.swp
*.swo

*.log
logs/

.terraform/
*.tfstate
*.tfstate.backup
.terraform.lock.hcl

data/
checkpoints/
*.parquet
*.avro

.pytest_cache/
htmlcov/
.coverage
coverage.xml

docker-compose.override.yml

# runtime artifacts
*.duckdb
*.duckdb.wal
.artifacts/
.hypothesis/
.iceberg/
.tmp/
# Local Windows test/build temp directories can contain locked pytest artifacts.
/.manual-build-tmp/
/.pytest-basetemp-sdk/
/.pytest-temp/
/.pytest_tmp/
/.sdk-build-tmp/
/pytest_temp2/
/pytest_temp_root/
.dora/
.bandit-baseline.json
!.bandit-baseline.json

# DuckDB runtime state
*.duckdb.tmp/

# Node
node_modules/

# Mutation testing output
mutants/

# Local working notes (root-level temp .md created during dev sessions).
# NOTE: BCG_audit.md was removed from this list on 2026-04-19 -
# it was a release artifact, not a session note.
/codex_res.md
/res_co.md
/rep.md
/more_help.md
/About_DE_project.md
/audit_*.md
/RELEASING.md
sdk/agentflow/**/__pycache__/
sdk/agentflow/**/*.py[cod]
integrations/agentflow_integrations/**/__pycache__/
integrations/agentflow_integrations/**/*.py[cod]
# Local Iceberg warehouse/runtime state (intentionally untracked). DV2 SQL/Python
# source under warehouse/agentflow/dv2/ is tracked normally — only the generated
# lake and build output are excluded here.
/warehouse/agentflow/orders/
/warehouse/agentflow/dv2/reference/build/
# Root API usage DuckDB runtime state (intentionally untracked).
/agentflow_api.duckdb
agentflow_bench_debug*.duckdb*
agentflow_demo_api.duckdb*

# Local autopilot tooling + runtime state (kept locally, not published).
.autopilot/
/scripts/autopilot.ps1
/scripts/install-autopilot-task.ps1
/tests/unit/test_autopilot_runner.py

# Local scratch notes at the repo root (audit prompts/results). Ignored so
# the clean-tree gate and git status stay quiet without touching the files.
/p[0-9].md
/p[0-9]_res*.md
/p_res*.md
/Cl_cop/

# Security scan workdir (generated by .github/workflows/security.yml safety job)
.tmp-security/

# Internal working notes / autonomous-session artifacts — kept locally, not published.
# These are process/handoff/scratch docs, not product or engineering documentation.
/AGENT_STATE.md
/AUTOPILOT.md
/BACKLOG.md
/help.md
/res.md
/all-open-questions-closure-plan.md
/close-gaps-plan.md
/road-to-9.8.md
/desc_for_julia.md
/fable_*.md
/next-session-*.md
/second-opinion-*.md
/.pi/
/.workflow/
/res/
docs/dv2-multi-branch/kimi_*.md
docs/dv2-multi-branch/RECORDING_DAY.md
docs/dv2-multi-branch/pitch.md
docs/dv2-multi-branch/brief.md
docs/operations/local-verification-matrix.md
docs/release-readiness-archive/
docs/codex-tasks/
docs/plans/codex-archive/
docs/lessons/
docs/audits/
docs/exploration/
docs/audit-history.md
docs/SESSION_HANDOFF.md
docs/dv2-multi-branch/SESSION_HANDOFF*.md
docs/customer-discovery-*.md
docs/pricing-validation-plan.md
docs/v1-1-interview-prep.md
docs/v1-1-research.md
docs/operations/autonomous-compact-safe-process.md
docs/operations/external-gate-evidence-intake.md
docs/operations/external-pen-test-attestation-handoff.md
docs/operations/generated-external-gate-pack-*.md
docs/operations/guarded-autopilot-*.md
docs/operations/immutable-retention-evidence-handoff.md
docs/operations/security-evidence-template.md
