.gitignore

# Generated by Cargo
# will have compiled files and executables
debug/
target/
docs/legal
# These are backup files generated by rustfmt
**/*.rs.bk

# MSVC Windows builds of rustc generate these, which store debugging information
*.pdb

# Rust coverage instrumentation (cargo llvm-cov / tarpaulin)
*.profraw

# IDE / editor local state
.vscode/
.idea/
*.swp
*~

.env
.DS_Store

# CLI and code-agent local state/logs
.sldo-logs/
.nettacker/
.copilot-logs/
.claude/*
!.claude/settings.json
.codex/
.copilot/
.cursor/
.windsurf/
.aider*
.continue/

# Generated research run logs
docs/slo/research/**/run.log
docs/research/**/run.log

# In-progress runbooks live under docs/slo/ and stay local until promoted.
docs/slo/RUNBOOK-*.md

# Research dossier output directory
output/

# Confidential biz-skill output (real PII, deal terms, real-person details).
# Contract: CLAUDE.md "Two-tier output: docs/biz/ (gitignored) and
# docs/biz-public/ (git-tracked)". Skills writing here include /slo-cofounder,
# /slo-hire, /slo-founder-check, /slo-talk-to-users, plus confidential drafts
# from /slo-equity, /slo-fundraise, /slo-legal, /slo-accounting.
docs/biz/

# Innovation Sandbox loop: spike scratch code (the ONLY code phase, /slo-spike).
# The single canonical scratch root — git-ignored so prototype-becomes-production
# drift is structurally prevented (innovation-loop runbook M1/M4, critique E3).
# Durable evidence worth keeping is copied into the tracked
# docs/slo/experiments/<slug>/evidence/ instead. The Experiment Books themselves
# (docs/slo/experiments/<slug>/EXPERIMENT.md) ARE tracked.
# LEADING SLASH is load-bearing: it anchors the pattern to the repo root so it
# matches ONLY ./experiments/ and NOT docs/slo/experiments/ (where the tracked
# Books live). An unanchored `experiments/` would wrongly ignore the Books.
/experiments/

# TLA+ tool cache location if a user accidentally symlinks it into the repo
.sldo/

# Release zip outputs from .github/workflows/release-zip.yml (sap-imp M4 green-lit).
# The workflow generates `dist/sunlit-orchestra-${TAG}.zip` via `git archive HEAD`
# and uploads it to GitHub Releases via softprops/action-gh-release. Local dry-runs
# of `gh release create --draft` produce the same file in `dist/`; never commit it.
dist/
.claude-plugin/dist/
*.zip
.nettacker

# Python bytecode caches
__pycache__/
*.pyc

# Kani / CBMC generated artifacts (target/ already ignored; these catch stragglers)
**/*.kani-metadata.json
kani_concrete_playback_*