# Rust
target/
# Cargo.lock is committed — this is a binary crate, so we want reproducible builds.

# Svault user vaults — NEVER commit to public repo
# Each user creates their own .svault/ directory locally
# This includes vault.enc, meta.yaml, session files, etc.
.svault/

# Svault export bundles — full encrypted backups (incl. the wrapped recovery
# key). Keep them out of git so they're never pushed by mistake.
*.svault-export.json
*.svault-export

# OpenRouter / AI-judge API keys — these belong in $SVAULT_OPENROUTER_KEY or a
# 0600 file under ~/.config/svault/ (outside any repo). This is defence-in-depth
# so a key file dropped into the tree by mistake is never committed.
openrouter.key
*.key
*.apikey
**/.config/svault/

# OS
.DS_Store
