# Paths excluded from this repository.
# Used by .githooks/pre-push to enforce boundaries (and mirrored by the
# "Proprietary Code Guard" in .github/workflows/security-check.yml).
# One path per line. Trailing slashes match directories.
# See docs/contracts/oss-plane-separation-v1.md for the open vs. private policy.

# ── Deployment / ops (private) ──
cloud/
docker-compose.yml
.gitlab-ci.yml
deploy.sh
website/
DEVELOPMENT.md
Makefile.deploy

# ── Secrets / host access (private; live credentials — gitignored, must never reach GitHub) ──
# server.md is the host-access/credentials reference (RUNBOOK §1, §10). It is
# .gitignored so it can never be staged; listed here too so the pre-push hook and
# the CI Proprietary Code Guard alarm if it is ever force-added (defense in depth).
server.md

# ── Business / monetization (private; never on the public GitHub mirror) ──
docs/business/
memory-bank/
discord-bot/
n8n-workflows/
lab/

# ── Commercial plane (lives in the private lean-ctx-cloud repo) ──
# These modules were relocated out of the open engine (oss-plane-separation-v1).
# The engine bills nothing and issues no licenses; it only emits the signed
# savings ledger. Re-adding any of these to the OSS engine is a leak —
# implement billing/licensing in lean-ctx-cloud instead.
# NB: core/billing/ stays partially OPEN (metering, plans, mod), so we list the
# specific commercial files rather than the whole directory.
# NB: core/licensing/ stays partially OPEN (mod.rs = types + Ed25519 verify,
# offline.rs = license parsing). Only keygen.rs (issuance with private key)
# is commercial and belongs in lean-ctx-cloud.
rust/src/core/license/
rust/src/core/licensing/keygen.rs
rust/src/cli/license_cmd.rs
rust/src/core/billing/success_fee.rs
rust/src/core/billing/stripe_invoice.rs
docs/contracts/license-v1.md
docs/contracts/success-fee-invoice-v1.md