.gitignore

# === editor / OS ===
# === internal strategy / working docs — NEVER go to the public fork ===
# === local WSL build helpers (contain machine-specific paths) ===
# === propagated hookify/behavioral config (not part of the deliverable) ===
# === Rust build artifacts (reproducible; keep Cargo.lock for --locked builds) ===
# === secrets / keys — NEVER commit ===
**/target/
*.env
*.key
*.pem
*.wasm
*_key.json
*export*.txt
*-keypair.json
.build-env.sh
.claude/
.compound-tmp/
.deploy.sh
.devnet-proof/
.DS_Store
.idea/
.oci/
.probe-toolchain.sh
.program-keys/
.ruff_cache/
.secrets/
.tools/
.validator.sh
.vscode/
.wsl-*.sh
.wsl-qr.py
.wsl-run.sh
BUILD-STATE.md
CLAUDE.local.md
docs/BUILD-JOURNAL.md
docs/BUILD-PATTERNS.md
docs/COMPLIANCE-AUDIT.md
# Its spoke. Split out 2026-08-19 so the @-imported hub stops carrying 33 KB of evidence
# into every turn. Same audience and same internal status as the hub, so it inherits the
# same ignore: a spoke that is not ignored while its hub is would be swept into the public
# repo by any bulk add, carrying exactly the content the hub was withheld for.
docs/COMPLIANCE-DETAIL.md
docs/DEMO-SCRIPT.md
docs/dossier-raw.json
docs/grounded-facts.json
docs/LISTING-DELTA-2026-07-22.md
docs/listing-verbatim.json
docs/LISTING-VERBATIM.md
docs/SECURITY-PATTERNS.md
docs/TRACK-E-MATRIX.md
docs/USE-CASES.md
goal.txt
HANDOFF-POST-COMPACT.md
docs/HANDOFF-ARCHIVE.md
id.json
onchain-build.sh
onchain-pin.sh
oracle-cloud-pw.txt
solana-claw-superteambr-export-3.txt
target/
x402-feed-gate/x402-earnings.jsonl
x402-earnings.jsonl
docs/SHOWCASE-POST-DRAFT.md
docs/DEMO-STORYBOARD.md
docs/DEMO-VO-SCRIPT.md

# Cloudflare Pages deploy cache
.wrangler/

# webshop-pay/build.py was ignored here while it carried absolute paths with a username
# and had drifted behind the artifact it generates. Both are fixed: it reads only paths
# relative to itself, and `python build.py --check` asserts index.html still matches its
# sources. It is TRACKED now, because a clone that cannot rebuild the deployed page
# cannot reproduce the submission.
__pycache__/
docs/X-BUILDLOG-DRAFTS.md

# Internal incident record: declares audience:internal and names a real third-party group.
# The PUBLIC custody artifacts are docs/transcripts/whatsapp-allowlist-gate.md (anonymised)
# and upstream issue 9348 / PR 9354, which report the same fail-open in full technical detail.
docs/transcripts/whatsapp-fail-open-incident.md

# Machine-specific WSL helper scripts (carry the local WSL username).
.cfg-read.sh
.fmt-run.sh

# scratch artifact from the Pages direct-upload script
manifest.out.json

# Demo video build intermediates: explorer frame captures, re-derivable by
# re-running the browser capture against the live explorer URLs in DEVNET-PROOF.
.demo-assets/

# Comprehension artifacts: quiz-gated explainers for the builder, not judge deliverables.
.comprehension/

# Verbatim user directive: internal only. Its own frontmatter says public:false;
# this is what actually enforces it. Carries home paths and internal process.
docs/USER-DIRECTIVE-2026-07-26-VERBATIM.md

# Internal, never published. Holds upstream security findings that are CONFIRMED but not yet
# filed with the maintainer; committing them here would be a 0-day drop on someone else's
# project. They move into public docs only after upstream has been notified and given time.
build-readiness/

# Internal working artifacts. These reference the gitignored internal docs
# (HANDOFF, BUILD-JOURNAL, COMPLIANCE-AUDIT), so their paths can never resolve in
# a clone and check-repo-paths.py is right to reject them. Audit and research
# notes for the operator, not part of what a judge reads.
docs/PROMPT-COMPLIANCE-LEDGER.md
docs/TRUTH-SWEEP.md
docs/research/
notes/

# Ad-hoc backups written by maintenance scripts before they edit a file in place.
# The handoff and its archive are themselves gitignored, so a byte backup is the ONLY
# recovery path when a block moves between them -- there is no git trail to fall back on.
# They are kept on disk deliberately and must never be committed.
*.bak
*.bak-*

# Internal node runbook: carries OCIDs, private IPs and absolute paths. Never publish.
docs/ops/

.submission-research/
docs/SUBMISSION-HANDOFF.md
docs/HUMAN-QUALITY-LEDGER.md
node_modules/
docs/SUBMISSION-TAKE-*.md
docs/SUBMISSION-FORM-FIELDS.txt

# Internal submission tooling and strategy. These carry an `audience: internal` marker, which is
# a comment git does not read, so the enforcement lives here and is checked by
# .tools/check-internal-not-tracked.py. Three of these were one `git add -A` from a public repo.
docs/MANDATE-LEDGER.md
docs/COMPLIANCE-LEDGER.md
docs/SUBMISSION-PLAN.md
docs/TASK-MIRROR.md
docs/SYNTHESIS-2026-08-05.md
docs/RIVALS-LIVE-2026-08-05.md
docs/FIELD-SWEEP-2026-08-05.md
docs/NETWORK-SPLIT.md
docs/MAINNET-COSTING.md
docs/SHOP-MAINNET-MOVE.md
docs/OCI-AND-NETWORKS.md
docs/SUBMISSION-CAPTURE-RIG.md

# Local safety net: archived operational artifacts kept off every clone.
# Holds the laptop publisher's attempt + deterministic logs, captured before the
# scheduled task was disabled. Operational evidence, not a deliverable.
.local-archive/

docs/PLUGIN-NETWORK-TARGETS-2026-08-05.md
docs/SETTLED-DECISIONS.md
docs/BRANCH-TRACE.md
docs/ASSET-SURFACING-2026-08-05.md
docs/PAYER-ROUTE.md
docs/CONSUMER-READS-LIVE-FEED-2026-08-05.md
docs/NETWORK-POLICY-COSTED-2026-08-05.md

# Internal production script (audience: internal)
docs/SCRIPT-LOCKED-v2.md
docs/SCRIPT-v3.md

# Internal demo-content census (audience: internal)
docs/DEMO-CONTENT-INVENTORY.md

# Generated by deploy/make_invariants.py and copied to the box. Environment-specific by
# construction (it pins box paths and build hashes), so it is regenerated rather than tracked;
# the generator and its two config files are what a fresh clone needs.
deploy/SHOP-INVARIANTS.json

# Agent fan-out writes findings here; scratch, never shipped.
.audit-findings/
docs/SHOOT-SHEET.md
docs/VO-SELECTION-MAP.json

# Internal shoot + unposted drafts (2026-08-06)
docs/FILM-THIS.md
docs/POST-THIS.md
docs/X-THREAD-DRAFTS.md
docs/CONNECT-TO-BOX.md
docs/THE-MONEY-SHOT.md
docs/POST-COMPACT-PROMPT.md
docs/SHOWCASE-EDITS.md
docs/RESUME-PROMPT.md
docs/SHOWCASE-FINAL.md
docs/SHOWCASE-PASTE.md
docs/PASTE-THESE-EIGHT.md
# Internal working state for the upstream-contribution arc. Carries home paths.
UPSTREAM-PR-RESCUE.md
# Outbound channel for things only the operator can do. Operator-facing, not a judge surface.
OPERATOR-INBOX.md

# Dated live captures written by scripts/demo-preflight.py. Runtime artifacts with a
# timestamp in the name: re-derivable by running the script, never tracked.
preflight-captures/