# Secrets — never commit these
.vault_pass

# Python environment
.venv/
__pycache__/
*.pyc
*.pyo

# Ansible collections (installed, not versioned)
.collections/

# Molecule ephemeral state
.molecule/
molecule/**/molecule.yml.bak

# Editor artifacts
.idea/
.vscode/
*.swp
*.swo
*~

# OS artifacts
.DS_Store
Thumbs.db

# Terraform
terraform/**/.terraform/
terraform/**/*.tfstate
terraform/**/*.tfstate.backup
terraform/**/terraform.tfvars
# .terraform.lock.hcl is intentionally tracked (pins provider versions)

# Service-UI verification screenshots (kept locally on ubongo, not committed — ADR-017)
.verify-runs/

# Integration-test transient run dir (ADR-025); diagnostics live under ~/integration-runs
tests/integration/.run/