# Credentials - never commit (root .claude/ only, not templates)
/.claude/
*.credentials*
*.key
*.pem
.secrets

# Kubernetes secrets with real values (use *.example as template)
deployments/k8s/base/secrets.yaml
deployments/k8s/base/credentials.yaml

# Local development
.env.local

# OS
.DS_Store
Thumbs.db

# IDE
.idea/
.vscode/
*.swp
*.swo

# Build artifacts
*.tar
*.gz
/rdev-api
/sdlc
coverage.out

# Temporary files
tmp/

# Deploy keys (generated, never commit)
*-deploy-key
*-deploy-key.pub
*-deploy-key.b64
.agentive-remediation/
