.DS_Store
._*
__pycache__/
*.py[cod]
*.log

.env
.env.*
*.pem
*.key
*.p12
*.p8
*.mobileprovision
*.jks
*.keystore
signing/*
!signing/
!signing/README.md
credentials/*
!credentials/
!credentials/README.md

.memory.local/
.agentlas/ontology-runtime.sqlite*
.agentlas/career-graph.sqlite*
.agentlas/experience-relations.jsonl*
.agentlas/.experience-relations.jsonl.*
.agentlas/field-test/
.agentlas/field-test-report.*
.agentlas/agent-ontology/
.ontology-runtime/
output/
docs/agent-os-redesign.md
.codex/
.claude/settings.local.json
.claude/settings.*.local.json

# >>> agentlas local project state >>>
.agentlas/
.agentlas/project-soul-memory.md
.agentlas/sitemap.json
.agentlas/feature-map.json
.agentlas/memory-map.json
.agentlas/memory-tickets.jsonl
.agentlas/vault-references.json
.agentlas/local-credentials.map.json
.agentlas/activation.json
.agentlas/skill-registry.json
.agentlas/skill-trials.jsonl
.agentlas/curator-decisions.jsonl
.agentlas/code-map/
.agentlas/ontology-runtime.json
.agentlas/ontology-sources.json
.agentlas/ontology-inbox/
.agentlas/ontology-runtime.sqlite*
.agentlas/career-graph.json
.agentlas/career-graph-sources.json
.agentlas/career-graph-inbox/
.agentlas/career-graph.sqlite*
.agentlas/experience-relations.jsonl
.agentlas/stormbreaker/
.agentlas/pipeline/
.agentlas/*.lock
.agentlas/*.sqlite*
.agentlas/*.jsonl
.env
.env.*
!.env.example
.env.local
signing/*
!signing/README.md
credentials/*
!credentials/README.md
# <<< agentlas local project state <<<

# Public Core contracts under .agentlas are source, not workstation state.
# Keep this allowlist exact so the package gate can fail closed without making
# memory, receipts, databases, or other local Agentlas state publishable.
!.agentlas/
.agentlas/*
!.agentlas/agent-card.json
!.agentlas/contract-injection-map.json
!.agentlas/global-commands.json
!.agentlas/mode-map.json
!.agentlas/routing-card.json
/docs
docs/three-level-orchestration-runtime.md

# Public-repository boundary: development-only material stays local. These
# patterns intentionally affect new files only; already tracked history must be
# removed through an explicit, reviewed release-tree change rather than a
# misleading ignore rule.
/.internal/
tests/
test/
**/tests/
**/test/
benchmarks/
**/benchmarks/
fixtures/
**/fixtures/
docs/
# Same boundary as .agentlas above: repository docs stay internal, but a doc the
# shipped build command actually reads at runtime travels with the adapter.
!claude/plugins/*/docs/
!claude/plugins/*/docs/**
!codex/plugins/*/docs/
!codex/plugins/*/docs/**
findings/
/research/
plans/
reports/
notes/
receipts/
evidence/
artifacts/
output/
tmp/
temp/
scratch/
coverage/
playwright-report/
test-results/
*.coverage
.coverage
.pytest_cache/
.mypy_cache/
.ruff_cache/
.hypothesis/
.githooks/
.playwright-mcp/

# Maintainer-only CI, release, benchmark, and test harnesses.
# NOTE: build-runtime-release-asset.sh + publish-runtime-release-assets.sh are
# intentionally tracked — the release-runtime.yml workflow invokes them, so they
# must live in the repo for auto-publish CI to run. They contain no secrets and
# self-enforce the runtime allowlist (no tests/credentials enter the download).
scripts/ao-gate.sh
scripts/bump-version.sh
scripts/changelog-sync.mjs
.changelog-sync-cursor.json
scripts/install-main-only-git-guard.sh
scripts/run-one-touch-terminal.command
scripts/score-robustness-eval.py
scripts/test-build-cloud-choice-contract.py
scripts/verify-cross-platform-harness.py
scripts/verify-main-only-git-guard.sh
scripts/verify-one-touch-install.sh
scripts/verify-workforce-bundle-digest-v4.mjs
scripts/verify-workforce-capability-binding-v1.mjs
**/*_test.py
**/test_*.py
**/*_test.pyc
**/*.test.js
**/*.test.ts
**/*.test.mjs
**/*.test.cjs
**/test-*.js
**/test-*.ts
**/test-*.mjs
**/test-*.cjs
**/test_*.sh
**/*-smoke.ts
**/*-smoke.mjs
**/*-smoke.cjs
**/*-smoke.py
**/*-benchmark.*
**/*benchmark*.*
.env.example
*.env.example
signing/
credentials/

# Agentlas local credentials and signing material never enter the public tree.
.env
.env.local
.env.*.local
._*
signing/
credentials/
.agentlas/ontology-runtime.sqlite*
.agentlas/career-graph.sqlite*
.agentlas/experience-relations.jsonl*
.agentlas/.experience-relations.jsonl.*

# 로컬 빌드 산출물(런타임 릴리스 tar.gz) — GitHub Release 자산으로만 배포, git 소스로는 안 실음.
dist/
scripts/test-package-hash-idempotent.py

# private corpus/verify tooling (not for public OS release)
scripts/publish-corpus.py
scripts/repackage-corpus.py
scripts/swap-canonical-corpus.py
scripts/verify-digest-vector-parity.mjs
scripts/verify-local-package-hash-parity.mjs

# Local context indexes and ontology runtime material generated by Agentlas
# workers. The curated public cards above remain source; these runtime outputs
# must stay on the workstation and out of commits/releases.
agentlas-context-map.json
scripts/verify-install-sh-delegation.sh
**/.agentlas/ontology-inbox/
**/.agentlas/ontology-inbox/**
**/.agentlas/ontology-runtime.json
**/.agentlas/ontology-runtime.sqlite
**/.agentlas/ontology-sources.json
scripts/test-orch-policy.py
