diff --git a/.gitignore b/.gitignore
index 22223e1..8f0891c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,13 @@ last-changelog-version
 .DS_Store
 *.swp
 *.tmp
+
+# --- per-host runtime identity + caches (never config) ---------------------
+agent/blobs/
+install-id
+puppeteer/
+
+# --- local backups + staging artifacts: kept on disk, never in history -----
+.AGENTTRASH/
+*.save
+*.bak-*