12# Fails when anything that must stay private is tracked: game data,3# tokens, private generator output, deploy secrets.4set -e5bad=$(git ls-files | grep -iE '(^|/)(data/|\.env|push-token|.*secret.*|.*token.*|[0-9a-f]{64}\.json)' | grep -vE '^engine/testdata/' || true)6if [ -n "$bad" ]; then7 echo "tracked files that must not be:"; echo "$bad"; exit 18fi9echo "tracked files: clean"