__pycache__/
*.pyc
*.egg-info/
.venv/
venv/
build/
dist/
.pytest_cache/

# Packet captures — never commit; they contain real host, index and
# network data from whatever environment they were taken in.
*.pcap
*.pcapng

# Splunk Cloud / forwarder credentials packages (TLS certs + auth keys).
*.spl
splunkclouduf/
*.pem
*.key

# Protocol research, experiment scripts and internal working notes are
# kept outside this distribution. Listed here so they cannot be added by
# accident if a working tree is ever copied across.
captures/
docs/PROTOCOL_NOTES.md
prompt_instructions.md
