__pycache__/
*.pyc
.pytest_cache/
.ruff_cache/
*.egg-info/
build/
dist/
.venv/
venv/
*.pem
*.intoto.jsonl
*.sigstore.json

# ...but the worked example's demo seal + its PUBLIC verify key are committed.
!examples/artifacts/*.intoto.jsonl
!examples/artifacts/field-manual.verify-key.pem
