# OS / editor cruft
.DS_Store
Thumbs.db
*.swp
*~
.idea/
.vscode/

# Secrets — never commit plaintext (secrets live SOPS-encrypted only; see docs/07)
*.dec.yaml
*.decrypted.*
*.key
*.pem
age.key
*.kubeconfig
kubeconfig

# IaC state / local runtime (for the future implementation tree)
.terraform/
*.tfstate
*.tfstate.*
.terraform.lock.hcl
*.tfvars
!*.example.tfvars

# Test / build artifacts
/results/
/reports/
*.junit.xml
coverage/