chore: clean public repo boundary

.gitignore

@@ -33,8 +33,33 @@ Thumbs.db
 
 # claude / agent local state (side-harness only; brigade block below
 # handles the handoff path with TEMPLATE.md kept tracked)
+.brigade/
+.claude/
 .codex/
 .openclaw/
+.solo-mise/
+
+# Source-repo dogfood workspace files. Public templates live under
+# src/brigade/templates/ instead.
+/AGENTS.md
+/CLAUDE.md
+/HEARTBEAT.md
+/IDENTITY.md
+/INSTALL_FOR_AGENTS.md
+/MEMORY.md
+/SAFETY_RULES.md
+/SOUL.md
+/TOOLS.md
+/USER.md
+/hooks/
+/memory/
+/scripts/
+/skills/
+
+# Internal implementation plans and stale generated branding assets.
+/docs/plans/
+/docs/specs/
+/docs/assets/solo-mise-banner.png
 
 # scratch
 /scratch/

CHANGELOG.md

@@ -46,6 +46,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `brigade run --read-only` prompt policy for planning and review runs that should inspect and recommend only, with native `codex exec --sandbox read-only` enforcement for Codex agents.
 
 ### Changed
+- Public repo contents now keep live dogfood workspace files, internal planning notes, and root memory cards untracked; public templates remain under `src/brigade/templates/`.
 - Dogfood handoff defaults now use `.codex/memory-handoffs/` for new Codex-driven local configs while preserving explicit configured inbox paths such as `.claude/memory-handoffs/`.
 - Bootstrap truncation is now treated as a hard doctor failure to prevent by moving durable detail into memory cards before agents load context.
 - Dogfood runs now default to a 600 second per-agent timeout for practical daily repo reviews.