.gitignore

/target
/fuzz/target
/fuzz/corpus
/fuzz/artifacts
/fuzz/coverage
**/*.rs.bk
*.uf2
__pycache__/
.direnv/
result
result-*
.DS_Store
/secrets/
secure_boot_*.pem
*.pem
/tools/tui/target/
/tools/emu/target/
# `rsk-emu --store <path>` writes a flash image, and that image holds the device
# seed in the clear — there is no OTP root under an emulator to seal it to. The
# default path is the working directory, so this is the difference between a
# throwaway test key and one committed to a public repository.
*.store

# TLC output: one log per configuration (`formal/run-tlc.sh`), plus the state
# directory TLC creates for its fingerprint set. The summary table is committed
# so the README's results table stays auditable; the ~700 KB of logs behind it
# is regenerated by `./run-tlc.sh all`.
/formal/out/*
!/formal/out/MATRIX.txt
/formal/states/

# Documentation site: build output and the mermaid assets that
# `mdbook-mermaid install` generates next to book.toml (not committed).
/book/
/site/
/mermaid.min.js
/mermaid-init.js