# build output
/credrot
/dist/

# never commit secrets or backup bundles (any sealer: age / hmac / openssl)
*.credrot.enc
*.credrot.age
*.age
*.env
.env.*

# local-only design docs (kept on disk, never pushed upstream)
docs/ROTATION.md

# editor / OS
*.swp
.DS_Store