.gitignore

# Work in progress — local only, not published
_wip/

# Claude Code — local only, not for public repo
CLAUDE.md
commit-and-push.sh
json-editor.js
json-editor-start.sh
json-editor-stop.sh
.json-editor.pid
last_order_claude.md
.last_order_claude.md.kate-swp
.server.pid
internal_audit_report_rules.md
gh-token.md
current_conversation.md
resume.sh

# Internal-only scripts — personal infra/workflow, not for public repo
scripts/setup-server.sh
scripts/reset-data.sh
scripts/stego.py
scripts/install-test-env.sh
scripts/publish-to-github.sh
scripts/fix-demo-bundles.js

# Dependencies
node_modules/
docs/community/

# Environment & secrets — NEVER commit
.env
.env.local
.env.production

# SSL certificates — NEVER commit
ssl/

# Runtime / generated
*.log
logs/
dist/
build/

# Backups created by backup-and-deploy.sh
data.bak.*
*.bak
*.bak.*
/scripts/bacup-and-deploy.sh

# soa.json mit ISO-Controls (urheberrechtlich geschützt, nicht im Repo)
data/soa.full.json

# Sensitive runtime data (generated, not needed for demo)
data/audit-log.json
data/embeddings.json
data/rbac_users.json.bak*
data/.demo_reset_done
data/.demo_lang_set

# Uploaded binary files (not tracked in git)
data/template-files/
data/guidance/files/
data/bcm-files/
data/governance-files/
data/legal/

# SQLite database (generated from JSON seed on first run)
data/isms.db
data/isms.db-shm
data/isms.db-wal

# Dev tools
.opencode
session*.md
.claude/
tmp/
.DS_Store
Thumbs.db
claude.md

# Puppeteer cache
.local-chromium/
.lcm/

# Demo-Server-Management (nicht publizieren)
demo-management/

# Privates Backlog (nicht publizieren)
docs/private/
landing/