diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..fb7c5e3
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+# Sandbox state (umwelt) is managed per project and must never be committed.
+.umwelt.toml
+node_modules/