Gitignore Is Not a Model Boundary

Client side validation improves user experience but is not a security boundary, as browsers can be bypassed using tools like curl or Burp Suite. Consequently, servers must treat all incoming data as untrusted. Similarly, Gitignore does not prevent coding agents from reading uncommitted files. Privacy boundaries end at the index, meaning ignored files remain model-visible. Coding agents often pack nearby context for remote models, increasing the risk of accidental data leaks through over-attachment.