# Generated state (keys, warrant, gateway, receipts, cloud creds) — NEVER commit
.state/

# Generated Claude wiring (hook timeout varies with approval overlay)
.claude/settings.json
.claude/settings.local.json

# .mcp.json is committed (portable ./bin/tenuo-claude launcher)

# Python
__pycache__/
*.py[cod]
*.egg-info/
.venv/
dist/
build/

# Local policy overrides (optional per-developer)
tenuo.yaml.local
tenuo.cloud.yaml
tenuo.advanced.yaml

# Scratch / agent output in the demo sandbox
demo/sandbox/out.txt
demo/sandbox/_probe.txt

# OS / editor
.DS_Store
