# Build artefacts
*.o
*.so
*.so.*
*.a
*.dylib
*.dll
*.exe

# Test binaries
tests/test_smoke
tests/test_dispatch
tests/mlkem_e2e
tests/mldsa_e2e
tests/slhdsa_e2e
tests/fuzz/

# libFuzzer harness binaries (built by fuzz/Makefile.fuzz, never committed)
fuzz/fuzz_ecdsa_raw
fuzz/fuzz_pq_params
fuzz/fuzz_attr_template
fuzz/fuzz_create_attrs
fuzz/crash-*
fuzz/leak-*
fuzz/oom-*
fuzz/timeout-*
fuzz/artifacts/

# Stale backups (rename/refactor leftovers)
*.bak

# Coverage
*.gcno
*.gcda
*.gcov
coverage.info
lcov-report/

# Tools
tools/freehsm-audit

# Reproducible-build outputs
dist/
*.tar.xz
*.tar.xz.asc
*.tar.xz.sha256

# Distributed artefacts (signed at release time)
libfreehsm-fips.so.sha256

# Editor / IDE
.vscode/
.idea/
*.swp
*~

# OS
.DS_Store
Thumbs.db

# Operator-side data (must NEVER be in git)
/var/lib/freehsm/
/etc/freehsm/freehsm.conf
*.tok
*.tok.tpm
audit.log

# GPG / secrets
*.asc.tmp
.gnupg/
secrets/

# Generated by make integrity
.fhsm_digest.bin

# Local test scaffolding
/tmp/freehsm-*

# Local secrets (NEVER commit)
CODEBERG_SSH_KEY
GITLAB_SSH_KEY
RELEASE_GPG_PASSPHRASE
RELEASE_GPG_KEY
*.gpg.key
deploy-key*
build.log
tests/test_smoke.sha256
tests/test_smoke.tampered

# sign_module.sh test artifacts
tests/test_smoke.sha256
tests/test_smoke.tampered
