# Cloudflared tunnel debug dumps — may contain live JWTs / request headers (NEVER commit)
data/cf_*.txt
data/cf_*.log

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
*.egg
*.egg-info/
dist/
build/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
wheels/
pip-wheel-metadata/
share/python-wheels/
*.manifest
*.spec

# Virtual Environments
venv/
ENV/
env/
.venv

# PyCharm
.idea/

# VS Code
.vscode/
*.code-workspace

# Jupyter Notebook
.ipynb_checkpoints
*.ipynb

# Data and Models
data/backups/
data/temp/
data/cache/
*.pkl
*.h5
*.pth
*.ckpt
*.safetensors
models/
# saas/models contains Python source, not ML weights — un-ignore it
!saas/models/
!saas/models/**

# Logs
logs/
*.log
*.out
*.err

# Testing
.coverage
.pytest_cache/
htmlcov/
.tox/
.nox/
coverage.xml
*.cover
.hypothesis/
test_results/

# Documentation
docs/_build/
site/

# Environment files
.env
.env.local
.env.*.local
*.env

# System files
.DS_Store
Thumbs.db
desktop.ini

# Temporary files
*.tmp
*.temp
*.swp
*.swo
*~
.tmp/

# Database
*.db
*.sqlite
*.sqlite3

# Secrets and credentials
*.key
*.pem
*.crt
*.pfx
secrets/
credentials/

# Performance profiling
*.prof
*.lprof

# Memory dumps
*.hprof
*.dump

# Claude
.claude/

# Local configuration overrides
config.local.yaml
settings.local.json

# Node modules
node_modules/

# FFmpeg binaries
ffmpeg.exe
ffprobe.exe
ffmpeg.zip
ffmpeg/

# Large binary files
*.exe
*.zip
*.wav

# Runtime data files
# Deployment-time generated files (written by CI, never committed)
data/deployment_manifest.json
data/logs/

# Autonomous-agent runtime outputs (confined here by core/autonomy/safe_output.py)
# and per-deployment status recorder state. Runtime artifacts, never committed.
data/runtime/
data/status/uptime_daily.json

# eve-agent-governance replay store — runtime decision evidence, never committed.
data/agent_governance/
data/*.db
data/*.sqlite

data/saas.db-shm
data/saas.db-wal
data/user_credentials.db-shm
data/user_credentials.db-wal
# Catch-all: never commit SQLite WAL/shared-memory sidecars (may hold
# uncheckpointed rows from credential/audit DBs).
*.db-shm
*.db-wal
*.db-journal

# --- P0-1: Audit chain durability ---
# The signed audit chain and governance evidence are EVE's store of record.
# They MUST NOT be git-tracked: git operations (checkout/reset/stash/merge)
# could silently rewrite the chain of custody. See scripts/migrate_audit_store.py
# and core/audit/store_guard.py. Relocate via EVE_AUDIT_STORE in production.
data/audit/
data/governance/**
# ...except the STATIC EU AI Act assessment documents (not runtime state):
# they are shipped into the prod image (see Dockerfile) as inputs for the EU
# Conformity dashboard view. Everything else under data/governance/ stays ignored.
!data/governance/eu_conformity_readiness.json
!data/governance/post_market_monitoring_plan.json
# Art. 16 gap-closure evidence artifacts referenced by eu_conformity_readiness.json:
!data/governance/qms_manual.json
!data/governance/conformity_assessment_annex_vi.json
!data/governance/eu_declaration_of_conformity.json
!data/governance/eu_database_registration_annex_viii.json
!data/governance/eu_authorised_representative_mandate.json
.chain_seal.json
**/.chain_seal.json
**/chain_seal.json
audit_migration_report.json

# P0-2: DR backup / restore drill artifacts (contain DB + audit copies — never commit)
/backups/
/restore_drills/
/restore_target/
restore_report.json

# P0-3: generated migration reconciliation artifact (regenerated each run)
POSTGRES_MIGRATION_RECONCILIATION.json
ALERT_VERIFICATION_REPORT.md

data/tts_cache/
data/voice_cache/
data/voice_events_log.json
data/ui_preferences_cache.json
data/uploads/
data/chroma/
data/test/
data/deep_integration_test_report.json
data/subsystem_config.json
data/sentience_calibration_knobs.json

# --- Audit BLOCKER #2: high-churn runtime/operational state ---
# These are mutated on every process start and pollute every diff. They are
# operational telemetry, not source. Relocate durable copies to a real store
# (Postgres / object storage) — see scripts/migrate_audit_store.py.
data/runtime_integrity/
data/resilience/
data/perf/
data/tve/
data/sentience/
data/coreguard/
data/stripe/
data/circuit_breaker/
data/accountability/
data/cognition_metrics/
data/continuous_consciousness/
data/observations/
data/molt/
data/agent_loop/
data/*.pid
data/eve.pid
data/*.log
cf_*.txt
cf_*_out.txt

# Local file-based auth store — contains bcrypt password hashes; must never be
# tracked. Runtime creates it on demand (core/auth/auth_manager.py, load-if-
# present); production auth is SaaS Postgres, so a fresh deploy needs no seed.
# NOTE: prior git history still contains this file — rotate the affected
# password(s) and scrub history separately (see docs/security/).
data/auth/users.json

# IaC provider cache / state (provider binaries are 100s of MB)
**/.terraform/
*.tfstate
*.tfstate.*
.terraform.lock.hcl
load_test_results/
eve_log.txt
test_output.wav
static_deploy.zip
nul

# Temp JS files
tmp_*.js

# OS / editor artifacts
extglob.FullName
*.lnk
MiroShark/
ruflo/

# Stray `terraform output -raw … > 0` redirect artifacts
deploy/terraform/aws-prod/0
deploy/terraform/aws-prod/value

# Generated sales/investor deck (dark + light) + its PNG previews (regenerate via scripts/)
eve_ai_core_sales_deck*.pptx
out_deck/
deck_preview/
deck_preview_light/
slide_1_background_preview.png
slide_1_full_preview.png
# Generated branded Word docs (regenerate via scripts/md_to_branded_docx.py)
docs/sales/design_partner_word/
docs/sales/prospect_word/
docs/sales/prospect_packs/

# Secrets / runtime state — never commit
# (committed copies were untracked via `git rm --cached`; rotate the leaked
#  values in real infra and purge from history with git filter-repo)
data/auth/.jwt_secret
data/security/
*.hex
data/api_keys.json
data/_archived/
data/memory_governance/

# auto_ship.py hook runtime (never commit)
.claude/auto-ship.log
.claude/auto-ship.off
.claude/auto-ship.baseline.json

# Outreach / Apollo lead-gen artifacts — third-party prospect PII (names + revealed
# emails). Operational data, NOT source; never commit. (The native engine store
# .claude/outreach/ is already ignored; these are the apollo_enrich / lead-gen outputs.)
docs/sales/NEW_LEADS_TRACKER_*.csv
docs/sales/APOLLO_REVIEW_QUEUE.csv
docs/sales/output/apollo_gmail_queue.json
data/sales/processed_companies.json
# Generated outreach drafts — embed named contacts + revealed emails (third-party PII)
docs/sales/output/new_leads_drafts/
docs/sales/output/new_leads_todiscover/
# F9: additional prospect-PII / lead-gen artifacts removed from tracking (GDPR/DD).
# Lead lists, prospect maps, personalized outreach drafts, and the gmail-draft
# generator embed named third-party contacts + business emails — operational data,
# never source. Kept on disk locally; never committed.
reports/outreach_copilot/
reports/prospect_discovery/
docs/sales/DESIGN_PARTNER_OUTREACH_TRACKER.csv
docs/sales/send_console.html
docs/sales/output/personalized_drafts/
scripts/gen_gmail_drafts.py
docs/sales/output/personalized_drafts/
# Whole generated-outreach output dir + operational logs/send-packs — all carry prospect PII
docs/sales/output/
docs/sales/OUTREACH_LOG.csv
docs/sales/MONDAY_SEND_PACK.md

# --- Audit remediation 2026-06-22: additional runtime state untracked ---
# These were committed before earlier ignore rules existed (git rm --cached'd).
# All are regenerated at runtime via mkdir(exist_ok=True); seeds are NOT here.
data/molt_controller/
data/attestation/
data/autonomy/decision_logs/
data/autonomy/approvals/
data/autonomy/autonomy_state.json
data/user_preferences/
data/world_state/
data/demo/traffic.jsonl

# --- Audit remediation 2026-06-22 (round 2): runtime telemetry / generated reports ---
data/certificates/
data/summaries/
data/forensic/
data/command_audit/
data/red_team/
data/auditor_fixes/
data/developer_log/
data/golden_evals/
data/sentience_tests/
data/compliance_reports/
data/memory_binding/
data/integrations/connections/
# data/security: runtime logs/reports (keep firewall_rules.json config)
data/security/*.jsonl
data/security/*.gz
data/security/sast_report_*.json
data/security/revoked_tokens.json
data/security/behavioral_profiles.json
data/tmp_verify/
data/exposure_audit.jsonl
data/router_validation_telemetry.json
data/*.bak.json

data/integrations/evidence/

# Playwright MCP scratch output (snapshots/console logs)
.playwright-mcp/

# Playwright UI-audit artifacts (screenshots + json)
artifacts/ui-audit/
tests/e2e/test-results/
tests/e2e/playwright-report/

# --- Untracked-cleanup 2026-06-27: generated audit/build/runtime output ---
# Audit/QA artifact tree (only the 6 hand-written *.md reports stay tracked;
# everything else here is generated screenshots/JSON/markdown audit output).
artifacts/
# Standalone audit/report/test output dirs (zero tracked files).
/audit-output/
/test-results/
reports/nav_audit/
reports/page_access_audit/
reports/system_health/
# Jailbreak regression reports — regenerated each run by
# tests/adversarial/jailbreaks/runner.py and by the jailbreak-regression CI job.
reports/security/
# Generated UI-audit captures dropped under docs/audit/.
docs/audit/blog_theme_shots/
docs/audit/interaction_report.json
docs/audit/panel_overlap_report.json
# Rust build target (153 build-output files were force-committed earlier;
# stop new fingerprint/build artifacts from re-appearing as untracked).
sdks/coreguard/rust/target/
# Runtime data the app writes at execution time (selectively committed files
# stay tracked; new dated runtime output should not nag git status).
data/actions/
data/agents/archive/
data/benchmarks/
data/feedback/
data/user_settings/
data/sovereign/org_crossover_test_a/
data/vgi/
# Re-ignore __pycache__ under saas/models/ (the `!saas/models/**` rule above
# at line 56 was re-including compiled bytecode).
saas/models/**/__pycache__/

# stale editor/backup copies (hygiene — see PRODUCT_BOUNDARY.md)
*.bak
*.bak2
*.bak3

# e2e runtime-generated fixtures (JWT keypairs, org connections) — created by test runs
tests/e2e/data/

# debug screenshots dropped at repo root (agent/browser sessions) — never commit
/*.png

# Buyer-verification runbook outputs (written to CWD by docs/runbooks/buyer-verification.md);
# never commit these. See scripts/check_no_root_junk.py for the root-junk guard.
/eve-pubkey.pem
/eve_pubkey.pem
/decision.json
/evidence.json

# CoreGuard appliance source renders (optimized derivatives are committed under interfaces/static/images)
/appliance1.png
/appliance_shop.png
/appliance_angle1.png
/appliance_angle2.png
/appliance_angle3.png
/appliance_angle4.png
