# Secrets — never commit
.env
*.env
!.env.example

# Runtime state, sessions, and per-agent memory (machine-specific, may hold secrets)
state/