Reworked the project structure.

.gitignore

@@ -3,25 +3,35 @@ __pycache__/
 *.py[cod]
 .pytest_cache/
 .idea/
-.run/
+
+# Legacy safety net only. Release tooling requires private keys outside the
+# checkout and generated artifact tree.
 release-keys/
 config/local.toml
+diagnostics/config/local.toml
 
-# Local development, investigation, and release tooling. The production
-# repository intentionally contains only the installer/runtime sources.
-AGENTS.md
-AIO_INSTALLER.md
-BOOTSTRAP_WORKPLAN.md
-DEBUGGING.md
-GITEA_UPDATES.md
-README.md
-config/
-configs/
-findings/
+# Generated builds, candidates, runtime evidence, and machine-local state.
+.artifacts/
+
+# Legacy output locations remain ignored while existing local data is migrated
+# manually. New commands write only below .artifacts/.
+candidates/
+dist/
 replay_pid*.log
 results/
-testcases/
-tests/
-tools/
-dist/
-/native/
+runner-data/
+runner-token
+infra/gitea-runner/.env
+infra/gitea-runner/runner-data/
+infra/gitea-runner/runner-token
+server/telemetry/.env
+/diagnostics/
+/devtools/
+/docs/
+/infra/
+/artifacts/
+/release_tests/
+/tests/
+/tools/
+/.gitea/
+/.run/