diff --git a/.gitignore b/.gitignore
index ee93dc9..2bdd6ed 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,3 +61,13 @@ content/*.log
 content/matchlog_*.txt
 content/btl4.exe
 content/*.EGG
+
+# scratchpad: session working files -- NEVER bulk-add (the 2026-08-13 6a744ef
+# incident: a stray `git add scratchpad` pushed a session handoff carrying the
+# gitea credential).  Bench .sh scripts are added INDIVIDUALLY by full path.
+scratchpad/**/*.out
+scratchpad/**/*.exe
+scratchpad/**/*.dll
+scratchpad/**/SESSION_HANDOFF*.md
+scratchpad/**/AGENT_FINDINGS*.md
+scratchpad/**/message*.txt