# The Dockerfile uses an allowlist of COPY paths, so this file is only a second
# line of defence (and keeps the build context small). Anything private listed
# here is also absent from the image because it was never named for copying.
.git
.github
.venv
venv
env
**/__pycache__
*.py[cod]
*.egg-info
build
dist
.pytest_cache
.mypy_cache
.ruff_cache
.coverage
coverage.xml
htmlcov
sbom
# Private / unmasked sources — mirrors .gitignore. Never let these into a layer.
local
submission
docs
CLAUDE.md
bench/sample_pdf/real_*
.env
.env.*
*.local
*.local.*
.idea
.vscode
.DS_Store
Thumbs.db
