banza/.gitignore at main · banza-protocol/banza · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
# Local AI/tooling
.claude/
.cursor/
.vscode/
.idea/

# Python/cache
.pytest_cache/
__pycache__/
*.pyc
.pyre/
.mypy_cache/
.ruff_cache/
*.egg-info/
.venv/
.coverage
coverage.xml

# Node/dependencies/build
node_modules/
.next/
dist/
build/
coverage/
*.tsbuildinfo

# App-specific generated files
website/node_modules/
website/.next/
website/out/
website/tsconfig.tsbuildinfo

# Env/secrets
.env
.env.*
!.env.example
*.p8
*.p12
*-service-account.json
*-firebase-adminsdk-*.json
google-services.json
GoogleService-Info.plist

# OS
.DS_Store
Thumbs.db
Thumbs.db:encryptable

# Non-protocol implementation directories — belong in separate repositories.
# Anchored to the repo root so they do not also match protocol content nested
# under docs/ (e.g. spec/, docs/reference/) or conformance/ (conformance/sdk/).
/core/
/reference/
/sdk/
/sdk-certification/
/integrations/
/docker/
scripts/

# Temp/cache
tmp/
.cache/

# BANZA infra/banza-network — runtime, secrets & generated (never commit).
# (.env is already covered above; .env.example stays tracked. Schema .sql stays tracked.)
infra/banza-network/nginx/certs/
infra/banza-network/postgres/data/
infra/banza-network/backups/
infra/banza-network/logs/
infra/banza-network/**/*.pem
# ADR-036: local inference model volume — GGUF files NEVER enter Git.
infra/banza-network/models/
*.gguf
infra/banza-network/**/*.key
infra/banza-network/**/*.age
infra/banza-network/**/*.sql.dump

# Rust engine build artifacts (ADR-038)
engines/*/target/
**/target/
artifacts/banza-wp1-1/

# Whitepaper: the canonical published PDFs live in docs/whitepaper/pdf/ and website/public/whitepaper/.
# Any PDF compiled next to the .tex source (docs/whitepaper/latex/*.pdf) is a local convenience build,
# never canonical — ignore it so a stale copy can't be committed. (Vector figures in latex/figures/ stay tracked.)
docs/whitepaper/latex/*.pdf

# Assurance execution evidence is produced per assessment run: committing it would make it attest
# to the commit BEFORE itself, and a snapshot cannot prove the tree that contains it.
assurance/execution-evidence.json
assurance/release-readiness.json