node_modules/
dist/
apps/desktop/dist-firewall-validation/
target/
coverage/
__pycache__/
*.py[cod]
playwright-report/
test-results/
.artifacts/
.tmp-codex/
tests/app-e2e/results/pair/
tests/app-e2e/results/group/
*.log
.env
.env.*
!.env.example
.idea/
.vscode/
infra/certs/
*.p2pc-vault

# Local physical/visual QA evidence belongs in scoped result directories, not
# in the immutable source snapshot.
/.tmp-*
/320
/classes.jar
/nullspace-preview-*.png
/p2pc-*.png
/p2pc-*.md
/p2pc-*.yml
/physical-*.png
/poco-settings-pre.png
/rolefix-*.png
/thread-*.png
/veilcord-*.png
/veilcord-*.md
/veilcord-*.txt
/veilcord-*.yml
/web-drawer-*.png

# Generated release/build artifacts. Signed binaries are attached to a release
# manifest and copied into a deployment bundle; private keys never enter Git.
/apps/android/app/build/
/apps/android/build/
/apps/android/release-out/
/apps/desktop/dist/
/apps/desktop/dist-firewall-validation/
/apps/marketing/public/downloads/*.apk
/apps/marketing/public/downloads/*.aab
/apps/marketing/public/downloads/*.exe
/apps/marketing/public/downloads/*.idsig
/apps/marketing/public/downloads/*.tar.gz
/apps/marketing/public/downloads/release-manifest.json
/deploy/android-release/out/
/deploy/*.tar
/deploy/.tmp/
/native/direct-engine/bin/**/*test*.exe
/tests/app-e2e/results/acceptance/
/tests/**/results/
