# Default deny: even a local clone may contain credentials or private experiments.
**
!.gitignore
!.dockerignore
!Dockerfile
!CONTAINER.md
!container-lock.json
!LICENSE
!PROTOCOL.md
!PROVENANCE.json
!PROVENANCE.md
!README.md
!SECURITY.md
!TESTING.md
!THREAT-MODEL.md
!package.json
!src/
!src/e2ee.js
!src/snapshot.js
!test/
!test/crypto.test.mjs
!test/endpoint.mjs
!test/file-receive.test.mjs
!test/minimal.test.mjs
!test/provenance.test.mjs
!test/security-regressions.test.mjs
!test/container.test.mjs
!tools/
!tools/snapshot.mjs
!tools/fuzz.mjs
!tools/inspect.mjs
!tools/lab.mjs
!tools/sbom.mjs