chore: harden repository with comprehensive ignore files and security policy

.cursorignore

@@ -0,0 +1,34 @@
+# Ignore large binary/model assets
+backend/models/
+*.pt
+*.onnx
+*.bin
+*.model
+*.ckpt
+
+# Ignore environments & dependencies
+venv/
+.venv/
+node_modules/
+**/node_modules/
+
+# Ignore sensitive data
+.env
+.env.*
+.secrets
+
+# Ignore temporary/generated files
+backend/temp/
+frontend/dist/
+*.log
+*.wav
+*.mp3
+*.mp4
+*.srt
+*.vtt
+
+# Ignore caches
+__pycache__/
+.cache/
+.pytest_cache/
+.npm/

.dockerignore

@@ -1,25 +1,47 @@
-# Virtual environments
+# Git & CI
+.git/
+.github/
+.gitignore
+.dockerignore
+.cursorignore
+README.md
+SECURITY.md
+
+# Environments
 venv/
 .venv/
 env/
-
-# Node dependencies and builds
 **/node_modules/
-frontend/dist/
 
-# Local cache & temporary files
-backend/models/
-backend/temp/
-backend/__pycache__/
+# Python artifacts
+**/__pycache__/
 **/*.pyc
 **/*.pyo
 **/*.pyd
-.git/
-.gitignore
-.DS_Store
 
-# Scratch/System data
-.gemini/
-scratch/
-brain/
+# Project artifacts
+backend/models/
+backend/temp/
+frontend/dist/
+frontend/node_modules/
 *.log
+server.log
+
+# Large files & Cache
+.cache/
+.pytest_cache/
+.npm/
+*.pt
+*.onnx
+*.wav
+*.mp3
+*.mp4
+
+# Editor & OS
+.vscode/
+.idea/
+.DS_Store
+Thumbs.db
+
+# Documentation
+docs/

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Repository Code Owners
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+*       @froster02

.gitignore

@@ -1,23 +1,96 @@
-# Virtual environments
+# --- Python ---
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+env/
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
 venv/
 .venv/
-env/
+pip-log.txt
+pip-delete-this-directory.txt
+.tox/
+.coverage
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+.hypothesis/
+.pytest_cache/
 
-# Python caches & temporary workspaces
-__pycache__/
-*.pyc
-*.pyo
-*.pyd
+# --- ML/Data ---
+# Ignore model weights and large datasets
+backend/models/
+*.pt
+*.pth
+*.onnx
+*.bin
+*.model
+*.ckpt
+*.joblib
+*.h5
+*.pb
+
+# --- Project Specific ---
 backend/temp/
 *.log
+server.log
+nohup.out
 
-# OS temporary files
-.DS_Store
-Thumbs.db
+# --- Audio/Video Artifacts ---
+# Ignore generated media outputs
+*.wav
+*.mp3
+*.mp4
+*.m4a
+*.srt
+*.vtt
 
-# Offline AI Model weights (Baked in during Docker build, must ignore in Git!)
-backend/models/
-
-# Node dependencies and compiled builds
+# --- Node/Frontend ---
+node_modules/
 **/node_modules/
 frontend/dist/
+.npm
+.eslintcache
+
+# --- Secrets ---
+.env
+.env.*
+.secrets
+*.pem
+*.key
+
+# --- IDE/Editor ---
+.vscode/
+.idea/
+*.swp
+*.swo
+.project
+.pydevproject
+.settings/
+*.sublime-project
+*.sublime-workspace
+
+# --- OS ---
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db

SECURITY.md

@@ -0,0 +1,36 @@
+# Security Policy
+
+## Supported Versions
+
+We actively maintain and provide security updates for the following versions of BIAF-offASR:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.0.x   | :white_check_mark: |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+We take the security of this project seriously. If you believe you have found a security vulnerability, please report it to us responsibly.
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them by:
+1. Opening a draft security advisory on GitHub (if you have permission).
+2. Or by contacting the maintainer directly at the email associated with the GitHub profile: @froster02.
+
+### What to include
+Please provide a detailed summary of the vulnerability, including:
+- The component/module affected.
+- Steps to reproduce (a Proof of Concept).
+- Potential impact.
+
+## Security Response Expectations
+
+Upon receiving a report, we will:
+- Acknowledge the receipt of your report within 48 hours.
+- Investigate the issue and provide a timeline for a fix.
+- Keep you updated on the progress.
+- Credit you for the discovery (if desired) once the fix is publicly released.
+
+Thank you for helping keep this project secure.