diff --git a/.gitignore b/.gitignore
index 4c3bcdf..06416b0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,23 +1,73 @@
+# ═══════════════════════════════════════════════════════════
+# WalletPress — .gitignore (RMI universal + WP-specific)
+# ═══════════════════════════════════════════════════════════
+
+# ── SECRETS (zero tolerance) ────────────────────────────────
 .env
-node_modules/
-.DS_Store
-*.log
+.env.*
+!.env.example
+!.env.template
+*.pem
+*.key
+*.p12
+*.pfx
+id_rsa
+id_ed25519
+*.session
+credentials.json
+service-account.json
+wallet.json
+vault.json
+.secrets/
+.rmi/wallets/
+
+# ── Python ──────────────────────────────────────────────────
 __pycache__/
-.mypy_cache/
-.ruff_cache/
-.pytest_cache/
-backend/.mypy_cache/
-backend/.ruff_cache/
-backend/.pytest_cache/
-*.py[cod]
+*.pyc
+*.pyo
+.venv/
+venv/
 *.egg-info/
 dist/
 build/
-*.egg
+.mypy_cache/
+.ruff_cache/
+.pytest_cache/
+htmlcov/
+.coverage
+backend/.mypy_cache/
+backend/.ruff_cache/
+backend/.pytest_cache/
+backend/__pycache__/
+backend/venv/
+
+# ── Node (WordPress plugin) ────────────────────────────────
+node_modules/
+.npm/
+wp-plugin/node_modules/
+
+# ── Docker ──────────────────────────────────────────────────
+docker-compose.override.yml
+
+# ── Data (too large for git, use HF S3) ─────────────────────
+data/
+*.dump
+*.rdb
+*.tar.gz
+
+# ── IDE ─────────────────────────────────────────────────────
 .vscode/
 .idea/
 *.swp
 *.swo
-Thumbs.db
-docker-compose.override.yml
-venv/
+*~
+.DS_Store
+
+# ── Logs ────────────────────────────────────────────────────
+*.log
+logs/
+
+# ── Cache ───────────────────────────────────────────────────
+.cache/
+tmp/
+*.tmp