diff --git a/.gitignore b/.gitignore
index a2ac30a..41fa6c3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,4 +23,22 @@ logs/
 dist/
 build/
 *.egg-info/
-__pycache__/
\ No newline at end of file
+__pycache__/
+
+# ── Nexus-MCP Specific Exclusions ───────────────────────────────────────────
+
+# SOC 2 Audit Logs (CC7.2 / CC6.1)
+# These contain redacted but sensitive system activity
+logs/*.jsonl
+
+# Generated Operational Reports (WIS-019)
+# These contain real system snapshots and should not be version controlled
+reports/*.json
+
+# Credentials / Local Overrides
+.env.test
+.env.local
+
+# IDE & Environment
+.replit
+.history/
\ No newline at end of file