.gitignore

/target
**/*.rs.bk
.DS_Store

# cargo-fuzz build/run outputs (the targets + Cargo.toml are committed)
/fuzz/target
/fuzz/corpus
/fuzz/artifacts
/fuzz/Cargo.lock

# tessera-wasm is its own (excluded) workspace, so the root `/target` rule does
# not cover its build dir; its Cargo.lock IS committed (reproducible builds).
/crates/tessera-wasm/target
# wasm-pack / wasm-bindgen `--out-dir` output for the extension (a build artifact)
/crates/tessera-wasm/extension/pkg
# tessera-tower-demo is likewise its own (excluded) workspace; ignore its build
# dir (its Cargo.lock IS committed, like the others).
/crates/tessera-tower-demo/target

# Cargo.lock IS committed: this workspace will host binaries (origin, client),
# and pinning the full dependency graph is the right call for reproducible,
# auditable security tooling.

# Foundry (contracts/, the Phase 2c on-chain court). Build/cache outputs and any
# fetched Solidity deps are regenerable, not committed. The current suite is
# DEPENDENCY-FREE (no forge install / submodules — the test harness is vendored
# in contracts/test/Std.sol), so `lib/` is normally empty, but ignore it anyway
# in case OpenZeppelin/solmate is added later via `forge install`.
/contracts/out
/contracts/cache
/contracts/lib
/contracts/broadcast

# circom / snarkjs build + dev-ceremony outputs (circuits/). Large, regenerable,
# and TEST-ONLY (the ceremony is single-party — see circuits/README.md). The
# COMMITTED artifacts are: R_dec.circom, build.sh, fixup_verifier.py, the helper
# .mjs scripts, the generated contracts/src/RDecVerifier.sol, and the PINNED
# proof vector hard-coded in contracts/test/RDecVerifier.t.sol — so CI verifies
# the proof on-chain WITHOUT circom/snarkjs. Everything below is build scratch.
/circuits/build
/circuits/node_modules
/circuits/package-lock.json
*.ptau
*.zkey
*.wtns