result
result-*
.direnv/

# built artifacts
*.ova

# private keys — must never be committed (they live off-repo in ~/.config)
*_ed25519_key
*.pem
id_*
age-keys.txt
keys.txt

# local env (PATH etc.)
.env

# local visual-verification output
.artifacts/