# Rust
/target/
**/*.rs.bk

# Node
node_modules/
dist/
.vite/

# Python
__pycache__/
*.pyc
*.pyo
*.egg-info/
.eggs/
*.whl

# IDE
.idea/
.vscode/
*.swp
*.swo

# OS
.DS_Store
Thumbs.db

# QuantaWatch runtime
/audit/
/keys/
*.key
*.pem
/data/
scans/
quantawatch.yaml
!quantawatch.yaml.example

# Generated verification/demo artifacts
cbom.json
cbom-tampered.json
evidence.json
evidence-tampered.json

# Claude Code local settings (personal, per-machine)
.claude/settings.local.json

# Environment
.env
.env.*

# Real operational data / exports / signing material — never commit (belt-and-
# suspenders on top of /data, /keys, /audit above). Your scans, findings, DB, and
# release seed are local-only; the public repo must not carry them.
/release-keys/
quantawatch-findings.json
*.cbom.local.json
*.sqlite
*.sqlite3

# Terraform
.terraform/
*.tfstate
*.tfstate.*
*.tfvars
!*.tfvars.example
crash.log

# TypeScript incremental build cache
*.tsbuildinfo
