# Real harness configs + manifests — never committed. They contain live bearer
# tokens, Vault paths, and account names. Analysis runs on copies under samples/.
samples/
# a real estate manifest is a config, not an example (inline comments are NOT
# valid in .gitignore — they become part of the pattern and match nothing)
capabilities.toml
*.local.toml

# Vault / credential material — must never land in the tree
*.env
*-vault*.env

# Local runtime data
*.db
*.sqlite3
*.sqlite3-wal
*.sqlite3-shm

# Python
__pycache__/
*.py[cod]
.venv/
venv/
*.egg-info/
dist/
build/
.mypy_cache/
.ruff_cache/
.pytest_cache/

# Machine-local agent tooling config (regenerated by `agent-notes init`)
.claude/

# Editors / OS
.DS_Store
*.swp

# never commit the local denylist (identifier gate)
.identifiers-denylist.local
