.gitignore

# Python
__pycache__/
*.pyc
*.pyo
*.egg-info/
dist/
build/
*.egg

# Environment
.env
.venv/
venv/

# IDE
.vscode/
.idea/
*.swp
*.swo

# AI/session artifacts
tmpclaude-*
.claude/
CLAUDE.md
CVE_GEN_V2_AGENT_INSTRUCTIONS.xml
benchmark_agent.py

# Data / Index directories (regenerated)
.chroma/
.codemap/
.codemap-raw/
.envoy-index/
.juice-shop-index/
.nginx-index/
.vulnrag/
src/appmapper/ui/.appmapper_index/

# Cloned repos
repos/
juice-shop/
src/appmapper/ui/.repos/

# Logs
*.log

# Scan results / output
scan_result*.json
*-scan-results.json
*-scan.json
test_output.json
routes_v2.json

# Credentials / cookies
cookies.txt
*cookies*.txt
csrf.txt

# Windows artifacts
nul
Thumbs.db
desktop.ini

# Batch scripts (may contain local paths or keys)
*.bat

# Research notes, blog posts, findings (not core)
ARDUPILOT_CVE_FINDING.md
BLOG_*.md
STATE_OF_THE_ART_RESEARCH_NOTES.md
ETL_RAG_VULNERABILITY_RESEARCH_PLAN.md
FINDINGS_RAG_ARCHITECTURE.md
FINDING_VALIDATION_STANDARD_*.md
OVERPOWERED_DESIGN_DOC.md
TOOL_RECOMMENDATIONS.md
cal-com-*.md
APPMAPPER_CVEGEN_INTEGRATION.md
CVE_GEN_V2_IMPLEMENTATION_ROADMAP.md
CVE_GEN_V2_UPGRADE_SPEC.md
VULNRAG_API_REFERENCE.md
VULNRAG_INTEGRATION.md

# CVE-Gen specific docs (not AppMapper)
docs/CVE_GEN_IMPROVEMENTS.md

# One-off scripts
index_envoy.py
index_nginx.py
index_protocol_targeted.py
query_envoy.py
query_envoy_security.py
query_nginx.py
query_protocol.py
query_vulnrag.py
envoy_index_config.yaml
test_classifier_api.py

# Non-core modules (separate projects / deprecated)
src/vulnrag/
src/threatmodel/
src/web/
src/query/

# Research / validation directories
argo-hunt/
istio-hunt/
envoy-deep-dive/
envoy-exploit-test/
envoy-validation/
traefik-exploit-test/
traefik-validation/
nginx-validation/
haproxy-validation/
caddy-validation/
hardened-bypass-test/
apisix-exploit-test/
roxy-wi-findings/
proxy-bypass-scanner/
vuln-research-framework/

# Generated reports
*-report.html