# Secrets — never commit. The root .gitignore already covers .env and *.key;
# this is defense-in-depth for the provisioning POC.
.env
.ai_agent_sandbox.key
*.key