# Local Claude Code harness state (not part of the template)
.claude/settings.local.json

# Python bytecode cache
__pycache__/
*.pyc

# OS / editor cruft
.DS_Store
Thumbs.db
*~
.*.swp

# Obsidian workspace state (keep notes, ignore local UI state). Depth-agnostic so it also
# covers the vault when opened at okf/ (the recommended vault root).
**/.obsidian/workspace*
**/.obsidian/cache
**/.obsidian/appearance.json

# Decision-support extension: raw-input staging (private, unverified). Only sanitized
# `source` notes derived from these ever enter the bundle. Keep the README, ignore inputs.
/artifacts/*
!/artifacts/README.md

# preso/: branded deck templates are often proprietary — keep them out of the repo.
# Rendered decks (*.pptx alongside their .md) are a publish surface; commit those if you
# want them versioned. Office lock files are never committed.
/preso/templates/*.pptx
/preso/templates/*.potx
# ...except decks rendered onto a branded template, which carry a brand suffix
# (<deck>.<brand>.pptx). That output embeds the template's proprietary assets, so it stays
# local — the .md is the source of record; rebuild rather than commit.
/preso/*.*.pptx
~$*

# Generated docs-site output (when a generator is added later)
/site/
/_site/
.quarto/

# Leadership-chat POC: generated probe transcripts (may contain answer content)
chat/transcripts/

# Self-deployable env (ADR-0005): bootstrap-generated trust manifest may hold org detail
deploy/deployment.manifest.md

# Secrets — never commit API keys or credentials (POC code will handle gateway/model keys)
.env
.env.*
*.env
!.env.example
!.env.sample
!.env.template
*.pem
*.key
*.p12
*.pfx
*.pkcs12
**/secrets/
**/*secret*.json
**/*credential*.json
.anthropic
.litellm.env
