# Integrity-pinned data files are hash-verified at runtime (e.g. the vendored Public
# Suffix List, sha256-pinned in scope/psl.py). They MUST be byte-identical on every
# platform: a Windows checkout with core.autocrlf=true would otherwise rewrite LF to
# CRLF, changing the bytes and breaking the pinned sha256, which fails closed and breaks
# every test that loads the file. Mark them binary so git never applies EOL normalization.
*.dat binary
src/riposte/data/public_suffix_list.dat binary
*.sh text eol=lf
# The repo-root `riposte` launcher is a bash script (no extension) for Unix cloners; it
# MUST stay LF or it breaks on Linux/macOS with a `bad interpreter: ...^M` CRLF error.
# Its `.ps1` sibling is the Windows launcher (PowerShell is CRLF-agnostic, left as-is).
riposte text eol=lf
