Safe Gitignore Builder

See the idea in action.

A default-deny candidate that opens src/tool.py, keeps src/notes.txt ignored, and leaves all target bytes unchanged.

A synthetic target with README.md, src/tool.py, and unreviewed src/notes.txt.

{
  "initial_rules": "# Ignore everything by default\n/*\n\n",
  "reviewed_rules": "# Ignore everything by default\n/*\n\n!/src/\n/src/*\n!/src/tool.py\n",
  "review_survives_rescan": true,
  "target_unchanged": true
}

Try the example.

From the repository root, follow the dependency requirements in the README. This example uses supplied synthetic material.

python -m pip install -e .
python -m examples.walkthrough

A default-deny candidate that opens src/tool.py, keeps src/notes.txt ignored, and leaves all target bytes unchanged.

The interesting part.

Approved descendants open only their ancestors, then unreviewed siblings are explicitly re-ignored; the target remains unchanged.

• Runnable example and its input
• Complete captured result
• src/safe_gitignore_builder/engine.py
• tests/test_engine.py
• README.md
• SECURITY.md