# build output
/credrot
/dist/
/incredigo-map.html

# never commit secrets or backup bundles (any sealer: age / hmac / openssl)
*.credrot.enc
*.credrot.age
*.age
*.env
.env.*

# local-only design docs (kept on disk, never pushed upstream)
docs/ROTATION.md
docs/ROTATION-REAL-CRED-RUNBOOK.md

# editor / OS
*.swp
.DS_Store