# Secrets — NEVER commit
.testenv
*.tfstate
*.tfstate.*
*.key
*.pem

# Loop runtime / working clones (created at launch by launch.sh)
/cc-ci/
/cc-ci-adv/
/.cc-ci-watch/
/.cc-ci-logs/

# More secrets / local state — NEVER commit
/.sops/            # master recovery age key
/cc-ci-secrets/    # separate sops-secrets repo, cloned in
/.claude/          # local claude session/project state
*.tmp.*            # editor temp files