diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 000000000..74a2970f7
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,188 @@
+# Git
+.git
+.gitignore
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# Virtual environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+
+# Testing
+.tox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+.hypothesis/
+.pytest_cache/
++.mypy_cache/
++__pypackages__/
++.ruff_cache/
+
+# Documentation
+docs/
+docs/_build/
+.sphinx-build/
+*.md
+README*
+
+# IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Logs
+*.log
+logs/
+
+# Temporary files
+tmp/
+temp/
+
+# Configuration & Secrets
+.env*
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+*.key
+*.pem
+*.crt
+secrets/
+credentials/
+
+# API Keys & Claude Instructions
+CLAUDE.md
+CLAUDE.local.md
+CLAUDE*.md
+.secrets
+.secrets
+.secrets
+# Keep repo config; ignore only local overrides
+config.local.yaml
+config.*.local.yaml
+# Common mistakes
+.vscode/settings.json
+.idea/workspace.xml
+*.backup
+*.bak
+*.orig
+*.tmp
+*~
+.DS_Store
+
+# Node modules (if any)
+node_modules/
+
+# Holmes specific
+~/.holmes/
+.holmes/
+
+# Additional items from .gitignore
+playwright.png
+.deepeval*
+pyrightconfig.json
+evals_report.txt
+evals_report.md
+config_toolsets.yaml
+**/.claude/settings.local.json
+.claude-trace/
+
+# Testing coverage
+htmlcov/
+.nox/
+*.py,cover
+cover/
+
+# Additional Python
+share/python-wheels/
+*.manifest
+*.spec
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Framework specific
+*.mo
+*.pot
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+instance/
+.webassets-cache
+.scrapy
+
+# Build tools
+.pybuilder/
+target/
+__pypackages__/
+
+# Task scheduling
+celerybeat-schedule
+celerybeat.pid
+
+# Sage
+*.sage.py
+
+# Project settings
+.spyderproject
+.spyproject
+.ropeproject
+
+# MkDocs
+/site
+
+# Type checkers
+.mypy_cache/
+.dmypy.json
+dmypy.json
+.pyre/
+.pytype/
+
+# Debug
+cython_debug/
+
+# Jupyter
+.ipynb_checkpoints
+profile_default/
+ipython_config.py
diff --git a/.gitignore b/.gitignore
index 6abf48dd5..4cc43c141 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,12 @@
-.DS_STORE
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
 tmp/
+temp/
 config.yaml
 
 # Byte-compiled / optimized / DLL files
@@ -169,3 +176,52 @@ config_toolsets.yaml
 
 **/.claude/settings.local.json
 .claude-trace/
+
+# API Keys & Secrets
+*_API_KEY*
+api_key
+.api_key
+API_KEY
+*_TOKEN*
+token
+.token
+TOKEN
+*.key
+*.pem
+*.crt
+.secrets
+secrets/
+credentials/
+.npmrc
+.yarnrc.yml
+.pypirc
+# common cert/key formats used for auth
+*.p12
+*.pfx
+*.p8
+*.der
+# keep placeholder files if we want directories present
+!secrets/.gitkeep
+!credentials/.gitkeep
+# Claude Instructions
+CLAUDE.local.md
+
+# Holmes specific
+~/.holmes/
+.holmes/
+
+# Common temporary/backup files
+*.backup
+*.bak
+*.orig
+*.tmp
+*~
+*.swp
+*.swo
+
+# Additional IDE files
+.vscode/settings.json
+.idea/workspace.xml
+
+# Environment files
+.env*