# Secrets
.env
.env.local
.env.*.local

# Harness state + outputs (regenerated per run)
state.db
state.db-journal
state.db-wal
state.db-shm
work/
results/
*.log

# Intentionally-vulnerable test app — kept out of history
test_target/
test_target/**

# Local plans / notes
plans/

# Python
__pycache__/
*.py[cod]
*.pyo
*.pyd
*.egg-info/
*.egg
.eggs/
.venv/
venv/
env/
.pytest_cache/
.mypy_cache/
.ruff_cache/
.tox/
.coverage
.coverage.*
htmlcov/
build/
dist/
pip-log.txt
pip-delete-this-directory.txt

# Editors / IDEs
.vscode/
.idea/
*.swp
*.swo
*~
.project
.pydevproject

# OS
.DS_Store
Thumbs.db

# Generated test artifacts
users.db
notes.db
*.sqlite
*.sqlite3

/REPORT-*.md
/REPORT.md
