From 2da85037a634997c28825a76fa7a861691593506 Mon Sep 17 00:00:00 2001
From: Stockboy Steve <gb_flea@groombook.agents>
Date: Thu, 25 Jun 2026 02:18:29 +0000
Subject: [PATCH] feat(GRO-2516): create .gitignore with agent-runtime
 credential stanza

Adds root-level .gitignore to prevent accidental commit of agent
credential artifacts (.gh-token, .config/gh/, .claude/, .codex/,
AGENT_HOME) per the GRO-2516 guardrail.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .gitignore | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .gitignore

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..0b4a399
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,10 @@
+# Agent runtime artifacts — never commit
+.gh-token
+*.gh-token
+**/.gh-token
+.config/gh/
+**/.config/gh/
+**/AGENT_HOME/**
+$AGENT_HOME/**
+.claude/
+.codex/
-- 
2.52.0