.gitattributes

# Public-release export control for DCENT_Toolbox.
#
# `export-ignore` tells `git archive` to OMIT these paths from a generated
# archive. The public GitHub release is produced by archiving this subtree, so
# everything marked here stays in the private monorepo (developers keep it) but
# never ships in the public tarball. This is non-destructive: nothing is removed
# from version control.
#
# Keep this list in sync with the "shipping tree" leak gate in
# tests/test_public_docs_no_internal_leak.py.

# --- Agent / internal build context (never public) ---
CLAUDE.md export-ignore
AGENTS.md export-ignore

# --- Internal process / campaign / RE docs (private monorepo only) ---
docs/dev/ export-ignore
docs/reviews/ export-ignore
docs/AUTONOMOUS_IMPLEMENTATION_PLAN.md export-ignore
docs/EXECUTION_BACKLOG.md export-ignore
docs/FIRMWARE_RE_CAMPAIGN.md export-ignore
docs/HORIZON1_PLANNER_MVP.md export-ignore
docs/INDUSTRY_REFERENCE_PLAN.md export-ignore
docs/INSTALL_READINESS_REPORT.md export-ignore
docs/UNIVERSAL_INSTALLER_DESIGN.md export-ignore

# --- Sensitive / non-redistributable binary artifacts ---
# Decrypted reverse-engineering artifact derived from a proprietary vendor tool.
# Kept privately for RE reference; must never appear in a public archive.
docs/unlocker2_decrypted.tar.gz export-ignore