# Binaries & Builds
/bin/
/dist/
/build/
*.exe
/backend/openrisk
/backend/openrisk-api
/backend/main
/backend/server
/backend/orserver

# Dependencies
node_modules/
/backend/vendor/

# Environment
.env
.env.*
!.env.example
.DS_Store

# Infrastructure Local Data
postgres_data/
redis_data/

# Local file storage (compliance evidence, etc. — see backend/pkg/storage)
/backend/uploads/
/uploads/
legacy_v1/

# Security: RSA Keys for JWT RS256
# NEVER commit private keys to version control
*.pem
secrets/
backend/keys/
/private_key.pem
/public_key.pem
backend/openrisk-server


# Claude Code — local overrides and runtime artifacts
.claude/settings.local.json
.claude/agent-memory-local/
.claude/CHECKPOINT.md
.claude/STATE.md*
CLAUDE.md.backup-*

# Playwright MCP screenshots and the backend test log. Proof screenshots go in
# the issue comment, not the repo (#956).
.playwright-mcp/
test.log
