# Obsidian vault config (editor-local, not part of the knowledge graph)
.obsidian/

# inbox/ — staging layer (Layer ①): mutable, transient intake awaiting /llm-kms ingest.
# Content is NOT version-controlled until promoted to raw/ (track structure only).
# Remove files from inbox/ after successful ingest.
inbox/**/*
!inbox/.gitkeep

# Raw data (sensitive documents — track structure only, not content)
raw/**/*
!raw/.gitkeep
# Bootstrap synthesis: ingested source, version-controlled exception (reusable prototype reference)
!raw/llm-kms-wiki.md
# Wiki Compiler Agent skill — version-controlled so source_ref in concept notes is auditable
!raw/llm-kms-skill.md

# L3 Cold Archive
archive/**/*
!archive/.gitkeep

# System credentials (sensitive)
system/credentials*
system/.env*

# Worktrees (project-local, never tracked)
.worktrees/

# MCP server — Python artifacts
mcp-server/.venv/
mcp-server/**/__pycache__/
mcp-server/*.egg-info/
mcp-server/llm_kms_mcp.egg-info/

# OS & Editor
.DS_Store
Thumbs.db
desktop.ini
*.tmp

# Logs (optional — remove if you want to track activity logs)
# **/log.md
