# Generated state (keys, warrant, gateway, receipts, cloud creds) — NEVER commit
.state/

# Generated Claude wiring (hook timeout varies with approval overlay)
**/.claude/settings.json
**/.claude/settings.local.json

# Python
__pycache__/
.pytest_cache/
*.py[cod]
*.egg-info/
.venv/
dist/
build/

# Local policy overrides (optional per-developer)
tenuo.yaml.local
/tenuo.yaml
tenuo.cloud.yaml
tenuo.advanced.yaml

# Scratch / agent output in the demo sandbox
demo/sandbox/out.txt
demo/sandbox/_probe.txt

# Local-only presentation notes (optional; not part of the public repo)
demo/docs/PRESENTATION.md

# OS / editor
.DS_Store
