.gitignore

# Secrets never enter history. CLAUDE.md §4 states this rule; this file is what makes it true.
.env
.env.*
!.env.example

# Build and dependency output
/_build/
# A second build tree for the Postgres adapter, which is chosen at compile time by TRINITY_DB and
# so cannot share _build with the SQLite one. `MIX_BUILD_ROOT=_build_pg TRINITY_DB=postgres` is how
# the postgres leg is reproduced locally.
/_build_pg/
/deps/
/cover/
/doc/
*.beam
erl_crash.dump

# Local data: the agent's own database and working state
/priv/data/
*.db
*.db-shm
*.db-wal

# Desktop shell (slices 001, 100, 101)
# `mix ex_tauri.install` creates `src-tauri/`, not `tauri/`, so the rule this line replaces
# named a directory that has never existed. Corrected at slice 001 G4. Rust build output was
# never actually at risk (the generator writes its own src-tauri/.gitignore carrying
# `/target/`), but a rule that matches nothing is a claim that is not true.
/src-tauri/target/
/priv/static/assets/
# Burrito's output: one packaged binary per target, tens of MB each. Slice 001 measures them
# and records the sizes in docs/packaging.md; the binaries themselves stay out of history.
/burrito_out/

# Editor and OS noise
.elixir_ls/
.DS_Store

# Added by the Phoenix generator at slice 000, merged in rather than overwriting.
/.fetch
*.ez
/tmp/
trinity-*.tar
/priv/static/cache_manifest.json
# `mix assets.deploy` (needed before MIX_ENV=prod builds, because config/prod.exs sets
# cache_static_manifest) writes a digested copy and a .gz sibling next to every static file.
# Both are derived from tracked originals. Added at slice 001 line 5, after a release build
# staged seven of them.
/priv/static/**/*.gz
/priv/static/**/*-????????????????????????????????.*
npm-debug.log
/assets/node_modules/
*.db-*

# Slice 002: the bill of materials is generated by the gate and attached to releases,
# never committed: it is a statement about a build, not a source file.
/sbom.cdx.json