# transient / local-only
.DS_Store
*.swp
.venv/
__pycache__/
*.pyc
# secrets never live in a shared store; belt-and-braces ignore anyway
.env
.env.*
# onboarding transients — written by the onboarding playbook / apply.py, never committed
values.json
.onboarding_apply/
.onboarding_apply_snapshot/
.onboarding_apply_snapshot.tmp/
# derived denylist — generated by core/derive-scrub.py from boundaries/boundaries.md, never committed
tools/scrub-terms.txt
