Invert .gitignore into a modeled-and-emitted file - third emit-plus-drift-gate inversion after ci.yml and ROADMAP - IgnoreRule pattern producer rationale authority plus a PURE hermetic GitignoreGate cloning CiYamlGate - two-tier derivable-vs-cited-external boundary - model-checkpoint-gated to warm-l

.gitignore

@@ -1,5 +1,5 @@
-# gunbc .gitignore — hand-maintained (the gunbc-bootstrap generator was removed in cleanup).
-
+# gunbc .gitignore — generated from dsl/gunbc/gitignore_authority.dag — do not hand-edit.
+#
 # Rule: Ignore anything that is (a) reproducible from committed source-of-truth files, or (b) environment-specific and not shared across developers.
 
 # --- Cargo build artifacts (from cargo) ---
@@ -23,22 +23,40 @@ cobertura.xml
 lcov.info
 coverage/
 
-# --- Editor/IDE state (from editor) ---
+# --- JetBrains IDE project state [cited: jetbrains.com/idea] ---
 # Per-developer configuration, not project state
 .idea/
+
+# --- VS Code workspace state [cited: code.visualstudio.com] ---
+# Per-developer configuration, not project state
 .vscode/
+
+# --- Vim editor state [cited: vim.org] ---
+# Per-developer configuration, not project state
 *.swp
 *.swo
-*.bak
+
+# --- Emacs backup convention [cited: gnu.org/software/emacs] ---
+# Per-developer configuration, not project state
 *~
 
-# --- OS metadata (from os) ---
+# --- Generic editor backup files [cited: cross-editor backup convention] ---
+# Per-developer configuration, not project state
+*.bak
+
+# --- macOS Finder metadata [cited: developer.apple.com (Finder metadata)] ---
 # OS-generated, not project state
 .DS_Store
+
+# --- Windows Explorer cache [cited: microsoft.com (Explorer thumbnail cache)] ---
+# OS-generated, not project state
 Thumbs.db
+
+# --- tmux terminal multiplexer logs [cited: github.com/tmux/tmux (pipe-pane log naming)] ---
+# Session log; not project state
 tmux-*.log
 
-# --- Secrets and local config (from secrets) ---
+# --- Secrets and local config [cited: github.com/motdotla/dotenv] ---
 # Environment-specific, may contain secrets
 .env
 .env.local
@@ -56,11 +74,11 @@ tmux-*.log
 # Generated by testgen; not source-of-truth
 src/v1/10_test/generated-tests/src/generated/
 
-# --- Node.js (from npm) ---
+# --- Node.js [cited: github/gitignore/Node.gitignore] ---
 # Not part of this project
 node_modules/
 
-# --- Claude Code (session state, not project state) ---
+# --- Claude Code session state ---
 .claude/
 
 # --- Stage0 regeneration temp dirs ---
@@ -90,11 +108,14 @@ out.txt
 # --- GitHub CLI local cache (dashboard / gh API) ---
 .gh-cache/
 
-# --- Python (local dev-only scripts; never committed to the .dag/.rs substrate) ---
+# --- Python local dev scripts ---
+# Python is used only for local dev tooling; never committed to the .dag/.rs substrate
 *.py
+
+# --- CPython bytecode cache (PEP 3147) [cited: python.org/peps/pep-3147] ---
 __pycache__/
 *.pyc
 
-# claim-corpus execution-map output
+# --- claim-corpus execution-map output ---
 .claim-map/
 src/v2/compiler/manual/sg2_scratch_probe.dag

dsl/gunbc/ci_spec.dag

@@ -15,6 +15,7 @@ type Gate
   | ExtdepsExternalAuthorityGate
   | DslCompileCleanGate
   | CiYamlGate
+  | GitignoreGate
   | RoadmapGate
   | SourceRootIngestGate
 
@@ -39,6 +40,7 @@ data gunbc_ci_floor_gates: List<Gate> = [
   ExtdepsExternalAuthorityGate,
   DslCompileCleanGate,
   CiYamlGate,
+  GitignoreGate,
   RoadmapGate,
   SourceRootIngestGate
 ]

dsl/gunbc/gitignore_authority.dag

@@ -0,0 +1,134 @@
+module gunbc.gitignore_authority
+
+import gunbc.gitignore_model {
+  IgnoreGroup, Producer,
+  DerivableProducerKind, CitedProducerKind,
+  CargoArtifacts, CargoCacheLocal, CodegenSymlink, CoverageReport,
+  GeneratorStamp, WorkflowRuntime, TestgenOutput, RegenTempDir,
+  ClaudeCodeSession, ClaimMapOutput, OpenClawArtifact, GithubCLICache,
+  AuthSessionTranscript, PythonLocalDevScript,
+  JetBrainsIDE, VSCodeIDE, VimEditor, EmacsEditor, GenericEditorBackup,
+  MacOSFinder, WindowsExplorer, Tmux, NodeJS, SecretsConvention, CPythonInterpreter,
+  Derivable, Cited,
+  CargoTargetDir, CargoTargetCodexDir, LocalCargoHome, CodegenBinSymlink,
+  TarpaulinHtmlReport, TarpaulinJsonReport, CoberturaReport, LcovReport, CoverageOutputDir,
+  JetBrainsProjectDir, VSCodeWorkspaceDir,
+  VimSwapFile, VimSwapFileAlt, EmacsBackupFile, GenericBackupFile,
+  MacOSFinderMetadata, WindowsThumbnailCache, TmuxLogFile,
+  DotEnvFile, DotEnvLocalFile, DotEnvLocalWildcard,
+  GeneratorStampFile, GunbcWorkflowDir, TestgenOutputDir, NodeModulesDir,
+  ClaudeSessionDir, RegenSourcesDir, RegenOutputDir, RegenGeneratedSourceRootDir,
+  FreshnessCheckDir, AuthTranscriptFile,
+  OpenClawControlDir, OpenClawAgentsFile, OpenClawHeartbeatFile, OpenClawIdentityFile,
+  OpenClawSoulFile, OpenClawToolsFile, OpenClawUserFile, OpenClawWorkboardFile,
+  OpenClawScriptsDir, V2InspectFile, V2InspectErrorsFile, GithubCLICacheDir,
+  PythonLocalDevScriptFile, PythonBytecodeCacheDir, PythonCompiledBytecode,
+  ClaimMapDir, ScratchProbeFile
+}
+
+data gitignore_authority: List<IgnoreGroup> = [
+  IgnoreGroup {
+    producer: Derivable { kind: CargoArtifacts },
+    artifacts: [CargoTargetDir, CargoTargetCodexDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: CargoCacheLocal },
+    artifacts: [LocalCargoHome]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: CodegenSymlink },
+    artifacts: [CodegenBinSymlink]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: CoverageReport },
+    artifacts: [TarpaulinHtmlReport, TarpaulinJsonReport, CoberturaReport, LcovReport, CoverageOutputDir]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: JetBrainsIDE, upstream: "jetbrains.com/idea" },
+    artifacts: [JetBrainsProjectDir]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: VSCodeIDE, upstream: "code.visualstudio.com" },
+    artifacts: [VSCodeWorkspaceDir]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: VimEditor, upstream: "vim.org" },
+    artifacts: [VimSwapFile, VimSwapFileAlt]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: EmacsEditor, upstream: "gnu.org/software/emacs" },
+    artifacts: [EmacsBackupFile]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: GenericEditorBackup, upstream: "cross-editor backup convention" },
+    artifacts: [GenericBackupFile]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: MacOSFinder, upstream: "developer.apple.com (Finder metadata)" },
+    artifacts: [MacOSFinderMetadata]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: WindowsExplorer, upstream: "microsoft.com (Explorer thumbnail cache)" },
+    artifacts: [WindowsThumbnailCache]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: Tmux, upstream: "github.com/tmux/tmux (pipe-pane log naming)" },
+    artifacts: [TmuxLogFile]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: SecretsConvention, upstream: "github.com/motdotla/dotenv" },
+    artifacts: [DotEnvFile, DotEnvLocalFile, DotEnvLocalWildcard]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: GeneratorStamp },
+    artifacts: [GeneratorStampFile]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: WorkflowRuntime },
+    artifacts: [GunbcWorkflowDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: TestgenOutput },
+    artifacts: [TestgenOutputDir]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: NodeJS, upstream: "github/gitignore/Node.gitignore" },
+    artifacts: [NodeModulesDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: ClaudeCodeSession },
+    artifacts: [ClaudeSessionDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: RegenTempDir },
+    artifacts: [RegenSourcesDir, RegenOutputDir, RegenGeneratedSourceRootDir, FreshnessCheckDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: AuthSessionTranscript },
+    artifacts: [AuthTranscriptFile]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: OpenClawArtifact },
+    artifacts: [
+      OpenClawControlDir, OpenClawAgentsFile, OpenClawHeartbeatFile, OpenClawIdentityFile,
+      OpenClawSoulFile, OpenClawToolsFile, OpenClawUserFile, OpenClawWorkboardFile,
+      OpenClawScriptsDir, V2InspectFile, V2InspectErrorsFile
+    ]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: GithubCLICache },
+    artifacts: [GithubCLICacheDir]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: PythonLocalDevScript },
+    artifacts: [PythonLocalDevScriptFile]
+  },
+  IgnoreGroup {
+    producer: Cited { kind: CPythonInterpreter, upstream: "python.org/peps/pep-3147" },
+    artifacts: [PythonBytecodeCacheDir, PythonCompiledBytecode]
+  },
+  IgnoreGroup {
+    producer: Derivable { kind: ClaimMapOutput },
+    artifacts: [ClaimMapDir, ScratchProbeFile]
+  }
+]