# VM state (SQLite db) — created at runtime
data/*
!data/.gitkeep

# Agent workspace
work/*
!work/.gitkeep

# Secrets: private ssh key + derived pubkey, real turnstone config
configs/ssh/id_ed25519*
configs/ssh/authorized_keys
configs/turnstone/config.toml