# ---> Rust
# Generated by Cargo
# will have compiled files and executables
debug
target
# The holger-demo wasm build output (index.html + JS glue + .wasm). Built by
# `cargo xtask demo-wasm`; lives ONLY on the `pages` branch, never on main.
/dist
# These are backup files generated by rustfmt
**/*.rs.bk
# MSVC Windows builds of rustc generate these, which store debugging information
*.pdb
# Generated by cargo mutants
# Contains mutation testing data
**/mutants.out*/
# RustRover
# JetBrains specific template is maintained in a separate JetBrains.gitignore that can
# be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
# and can be added to the global gitignore or merged into this file. For a more nuclear
# option (not recommended) you can uncomment the following to ignore the entire idea folder.
#.idea/
.idea/
# bench_history.jsonl is NOT ignored (owner's ruling 2026-09-20). It is the
# receipt half of every `nornir bench run holger`, and it is the BACKUP the doc
# mashup renders measured numbers from when nornir/mimir cannot be opened on the
# machine building the docs — a measurement that exists only in a warehouse
# nobody can open is a page that says NOT MEASURED. dwarves tracks its own.
# The merge-conflict objection is answered in .gitattributes: the file is
# append-only JSONL and carries `merge=union`.
# Generated docs book — regenerate via `nornir docs`/docs_export, never commit (keep repo lean)
/docs/*
# …except the AI-agent context pack: generated by `nornir docs ai-context`, but
# tracked so an agent finds it in-tree (regenerated from .nornir/ai-context.toml).
!/docs/ai-context.md
!/docs/ai-context-full.md
# …and the maintained Secure Update Gateway MVP docs: hand-written design/threat/
# operator prose (NOT generated by `nornir docs`), tracked so they ship with the feature.
!/docs/secure-update-gateway-mvp.md
!/docs/secure-update-gateway-threat-model.md
!/docs/secure-update-gateway-operator-guide.md
!/docs/secure-update-gateway-limitations.md
# …and the hand-written Holger v2.0 plan (linked from the README).
!/docs/HOLGER-V2.md
# …and the hand-written release provenance page (SLSA Build L3; linked from the README).
!/docs/SLSA.md
# …and the hand-written feature list (linked from the README and HOLGER-V2.md).
!/docs/FEATURES.md
# …and the hand-written 1.0 airgap demo guide (scripts/demo-airgap.sh).
!/docs/demo-airgap.md
# …and the hand-written estate notes: who approves on a box (lane W2), and the health words that need no action (lane W9).
!/docs/estate-approvers.md
!/docs/estate-health-words.md
# Runtime audit logs (Arrow-IPC) emitted by the running server — never source
server/lib/holger-audit/*.arrows
holger-audit/
# The read gate's posture a test boot records under its data root (HCON-5), "." when none is set.
**/posture/read-gate
**/posture/public
# Runtime jera job ledger (redb) emitted by the running server / tests — never source
server/lib/holger-jobs/
holger-jobs/
docs/book.pdf
.claude/
.znippy-out/
.iso-out/
# the installer composition's staging dir (payloads assembled for mastering)
iso-root/
# holger's own signed monetize plugin, staged for a metered build (server/lib/build.rs self_plugin)
/.plugin-out/
# The scan sandbox's staged entries (`cargo xtask scan-worker stage`, lane HOLGER-MEDIA): a
# build output the forge packs into the app archive, like the plugin above.
/.sandbox-out/
# The gate's receipts (private-monetize-ops `gate holger` writes them here; `estate-media
# --where upcloud` reads them): proof outputs, never a source.
/.mock-receipts/
# The end-to-end gate's receipts (private-monetize-ops `cargo xtask gate holger`): local evidence, read by estate-media.
/.mock-receipts/
# Holger install test receipts (`cargo xtask installtest`, lane B2): local proof, read by the ONE kit gate.
/.installtest-receipts/
# The estate's sibling patches, switched ON in a checkout that has the siblings beside it
# (`sh .cargo/estate-siblings.sh`, every `cargo xtask`). Committed, it breaks every lone clone.
/.cargo/siblings.toml
# xtask/boot has no dependencies; its lock only lists the sibling patches it does not use,
# which differ between an estate checkout and a lone clone.
/xtask/boot/Cargo.lock
# `cargo xtask bench --local` receipts and tables (the committed record is bench_history.jsonl)
/bench-results/