From 7064eacdccf888a983ceb0d989ca93a5c4f15dcb Mon Sep 17 00:00:00 2001
From: TheFlow <theflow@sydigital.com>
Date: Fri, 27 Mar 2026 13:16:00 +1300
Subject: [PATCH] fix(security): remove internal tooling from public repo

Removed .claude/ (session archives, hooks, instruction history),
.credential-vault/ (internal tooling), .memory/ (governance state),
.stripe-ids.json (test Stripe IDs), .migration-backup/.

Added all to .gitignore to prevent future commits.
---
 .gitignore | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.gitignore b/.gitignore
index 5978c080..59218820 100644
--- a/.gitignore
+++ b/.gitignore
@@ -96,3 +96,11 @@ docs/research/
 .admin-credentials.local
 .env.backup*
 TRAINING GPU QUESTION FIRST RAISED.txt
+
+# Internal tooling — NEVER push to public repos
+.claude/
+.credential-vault/
+.memory/
+.stripe-ids.json
+.migration-backup/
+.venv-docs/