/runtime/ /.tools/ /.go*.zip *.log # Local state, signing secrets and generated historical builds must not be uploaded. /tmp/ # Signing key storage and private-key exports (JSON, PEM, DER, etc.). /signing/ *.private.* *.key *.pfx *.p12 *.db *.db-shm *.db-wal *.exe /*.env **/.env **/.env.local /*-linux-arm64* /*.tar.gz /bin/ /backend/bin/ __pycache__/ # Source-only repository: keep release artifacts and local lab/history off Git. /release/ /build/ /aaa-lab/ /docs/ /frontend/docs/ /scripts/verify-final-release.ps1