# Provisioner private key — NEVER commit (constraint: Q3)
tools/provisioner_key

# Runtime state
tmp/
.clones/
test-home-*/

# Python bytecode cache (added by smoke tests importing the runner)
tools/__pycache__/

# Env / secrets
.env
.env.local
*.bak-*
