node_modules/
.DS_Store
coverage/
harness-events.jsonl
*.log
reports/baselines/*.json
reports/watch/config.json
reports/watch/latest.json
.env
.env.*
*.key
*.pem
credentials.*
secrets.*
.local/
HANDOFF-FINDINGS.local.md

# --- session/local state ---
# STATE.md is LOCAL-ONLY here: llm-security has a public remote (open/llm-security),
# and the global ~/.claude/CLAUDE.md convention is public remote => gitignored.
# Untracked 2026-08-01 (org-ops finding) after being tracked since project start;
# git history keeps the old commits, this only stops future ones.
STATE.md
REMEMBER.md
ROADMAP.md
TODO.md
NEXT-SESSION-PROMPT*.local.md
*.local.md
*.local.json
*.local.sh
.DS_Store
.claude/

# Voyage-generated plan annotation HTML (regenerable via annotate.mjs)
docs/plans/*.html