diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..05e6e7f
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,9 @@
+# Normalize line endings: store as LF in repo, keep LF on checkout
+* text=auto eol=lf
+
+# Binary types (never modify)
+*.gz binary
+*.png binary
+*.jpg binary
+*.webp binary
+*.ico binary
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..b520973
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,15 @@
+# Python runtime artifacts
+__pycache__/
+*.py[cod]
+
+# Secrets & runtime data — never commit
+.env
+*.db
+
+# Deploy bundles (built locally per the README, not distributed via git)
+*.tar.gz
+
+# Local working files kept out of the published repo
+README_old.md
+termux_relay.py
+termux_relay_v2.py
diff --git a/server/__pycache__/__init__.cpython-310.pyc b/server/__pycache__/__init__.cpython-310.pyc
deleted file mode 100644
index b6b6fd5..0000000
Binary files a/server/__pycache__/__init__.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/app.cpython-310.pyc b/server/__pycache__/app.cpython-310.pyc
deleted file mode 100644
index bda77db..0000000
Binary files a/server/__pycache__/app.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/auth.cpython-310.pyc b/server/__pycache__/auth.cpython-310.pyc
deleted file mode 100644
index 2a1ae18..0000000
Binary files a/server/__pycache__/auth.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/config.cpython-310.pyc b/server/__pycache__/config.cpython-310.pyc
deleted file mode 100644
index f95b1a6..0000000
Binary files a/server/__pycache__/config.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/mcp_tools.cpython-310.pyc b/server/__pycache__/mcp_tools.cpython-310.pyc
deleted file mode 100644
index cf09ddd..0000000
Binary files a/server/__pycache__/mcp_tools.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/models.cpython-310.pyc b/server/__pycache__/models.cpython-310.pyc
deleted file mode 100644
index 62db35c..0000000
Binary files a/server/__pycache__/models.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/relay_hub.cpython-310.pyc b/server/__pycache__/relay_hub.cpython-310.pyc
deleted file mode 100644
index 70322ad..0000000
Binary files a/server/__pycache__/relay_hub.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/safety.cpython-310.pyc b/server/__pycache__/safety.cpython-310.pyc
deleted file mode 100644
index c074e89..0000000
Binary files a/server/__pycache__/safety.cpython-310.pyc and /dev/null differ
diff --git a/server/__pycache__/session_registry.cpython-310.pyc b/server/__pycache__/session_registry.cpython-310.pyc
deleted file mode 100644
index cf9cb0d..0000000
Binary files a/server/__pycache__/session_registry.cpython-310.pyc and /dev/null differ
diff --git a/signal-bridge-deploy-v4.tar.gz b/signal-bridge-deploy-v4.tar.gz
deleted file mode 100644
index f0c35b8..0000000
Binary files a/signal-bridge-deploy-v4.tar.gz and /dev/null differ