chore(hygiene): root secret-capture guards — .gitignore patterns + opt-in pre-commit secret scan (plan R2-08 T3)

2026-07-13 09:42:49 -04:00
parent 1429ddaa0e
commit 90cdb6e51a
3 changed files with 36 additions and 0 deletions
@@ -44,5 +44,14 @@ docker-env2/*/data/
 # Local credentials / login captures — never commit
 *login*.txt

+# Ad-hoc scratch/credential captures at the repo root — never commit
+# (arch-review 08 round 2 NF1: a live API key sat in an untracked test.txt)
+/test.txt
+/*credentials*
+/*secret*
+
+# Claude tool worktrees (NF7)
+.claire/
+
 # Sister-project deployment artifacts (not part of this solution)
 /deploy/