.gitignore

/target
# macOS Finder copies sometimes create `target 2/`, `target 3/`, etc.
/target */
target*/

# Generated files
# Local scratch artifacts (regenerated)
.generated/
generated/
# Static analysis reports
unified-static-analysis-report.md
static-analysis-failures-summary.md
repo-specific-analysis.md
evaluation-pattern-analysis.md
opengrep-results.json
opengrep-results.sarif
opengrep-security-results.json
opengrep-nlp-results.json
opengrep-eval-results.json
opengrep-anno-results.json
opengrep-error-results.json
opengrep-memory-results.json
safety-report.json
safety-report.md
.geiger-tmp.json
.machete-tmp.txt
.deny-tmp.txt
lcov.info
coverage-html/
static-analysis-benchmark.txt
tool-comparison.md
.unsafe-code-trends/
*.html
!docs/**/*.html

# Export outputs (the CLI `anno export` writes here by convention)
exports/

# Cache directories
.anno_cache/
.cache/
.anno/
# Note: crates/anno workspace crate is tracked, but ignore any build artifacts within it
crates/anno/target/

# Proptest regressions (keep these in source control per proptest docs)
**/proptest-regressions/

# IDE
.idea/
.vscode/
*.swp
*.swo
.cursor/

# Claude Code (local settings, commands, artifacts)
.claude/

# Cargo crates.io packaging (local scratch)
crates/*/README.md

# OS
.DS_Store
Thumbs.db

# Local README preview artifacts (scratch)
README_preview_analysis*.txt
README_preview_screenshot*.png

# Python
.venv/
__pycache__/
*.pyc
*.pyo
*.py[cod]
*$py.class

# Local test output (scratch)
test_output/

# Local compiled binaries (scratch)
debug_entities

# Local real-data fixtures (may have redistribution restrictions; keep local-only)
hack/real_data/

# Temporary files
*.tmp
*.bak
*.backup
debug_*
url_validation_report.json
# Cargo local overrides (keep local-only config untracked)
.cargo/
!.cargo/
!.cargo/config.toml.example
.cargo/config.toml
mutants.out*/

# Spot evaluation ephemeral state
scripts/spot/config.env
scripts/spot/fleet_id.txt
scripts/spot/instance_ids.txt
runctl.toml

# Spot evaluation artifacts (raw results ignored, aggregated kept for baselines)
reports/spot/result-*.txt
reports/spot/result-*.json

# Test binaries and artifacts
test_*
test_profiling*

# Archived documentation (progress docs, old status reports)
docs/archive/

# Archive directory (skeleton code, old implementations)
archive/

# Generated evaluation reports (temporary, regenerated on demand)
*_report.md
*-report.md
*-seed-*.md
eval-seed-*.md
eval-sanity-report.md
comprehensive_evaluation_report.md
stress_test_report.md
verify_new_features_report.md

# Muxer history cache (ephemeral; don't commit)
crates/anno-eval/muxer_history*.json

# LinUCB global state (ephemeral; don't commit)
linucb_global_state.json

# Eval history + SQLite index (ephemeral; don't commit)
eval-results.jsonl
eval-history.db

# Atomic-write temp files (leftover on crash)
*.json.tmp

# Muxer decisions logs (ephemeral; don't commit)
# Default local path is under the OS cache, but devs may point ANNO_CACHE_DIR into the repo.
muxer_decisions*.jsonl

# Temporary review/status documents (should be in docs/ or archived)
FIXES_APPLIED.md
REVIEW_BACKWARDS.md
REVIEW_ISSUES.md
*.md
!README.md
!CHANGELOG.md
!CONTRIBUTING.md
!SECURITY.md
!docs/**/*.md

# Reports directory (generated; do not track)
reports/

# QA artifacts (generated; do not track)
qa/

.env

# MCP config (may contain API keys)
.mcp.json*

# fcoref ONNX symlinks (any depth; no trailing / — they're symlinks not dirs)
**/fcoref_onnx

# ONNX model artifacts (large, download on demand)
*.onnx
*.onnx_data

# Hygiene (added by guardian audit)
.env.*
*.log
dist/
build/