/target
Cargo.lock

# session scratch — never track (may contain RE breadcrumbs)
scratch/

# internal agent context — never publish (leak-guard blocks both)
CLAUDE.md
.claude/