.gitignore

# Signing keys
cosign.key
cosign.private

# BlueBuild generated
/Containerfile

# Go
services/*/vendor/
# Compiled Go binaries (match service directory name)
services/airlock/airlock
services/registry/registry
services/tool-firewall/tool-firewall
services/gpu-integrity-watch/gpu-integrity-watch
services/mcp-firewall/mcp-firewall
services/policy-engine/policy-engine
services/runtime-attestor/runtime-attestor
services/integrity-monitor/integrity-monitor
services/incident-recorder/incident-recorder

# Python
__pycache__/
*.pyc
*.egg-info/
dist/
.venv/
.pytest_cache/
.mypy_cache/
.ruff_cache/

# Generated service/test artifacts
/services/quarantine/build/
/services/incident-recorder/.tmp/

# IDE
.idea/
.vscode/
*.swp

# OS
.DS_Store
Thumbs.db
/.bluebuild-scripts_*

# Sandbox bundle
/deploy/sandbox/.env
/deploy/sandbox/runtime/

# Local VM qualification output and one-time bootstrap secrets
/output/
secai-first-boot-secrets.txt
secai-ks.cfg
*.qcow2
*.ova
*.vmdk