gitattributes: restore canonical ruleset from main; add vault guards

The 110-line case-folded LFS + eol ruleset was deleted in 2658311d6,
leaving zero attributes resolving: LFS orphaned (1,845 pointers, no
patterns), no eol authority (system core.autocrlf=true unchecked - the
mechanism behind the 2026-08-11 .ollama model-blob corruption).

Base = origin/main:.gitattributes adopted verbatim (incl. #954's
anchored extensionless-config block) so the eventual logan/obsidian ->
main merge stays suffix-only. Vault-local section appends: .ollama
byte-exactness guard (-text -diff -merge -filter), LF-anchored repo
plumbing, and census binary classes (fonts/ico/pyc/etl/dat/sqlite-wal).

Historical raw blobs (440 jpg / 130 png / 52 mp4 / 16 MOV) deliberately
NOT converted - no renormalize churn; they migrate individually on next
modification. Future adds of all media classes go to LFS automatically.

Author: loganfinneyPTV

.gitattributes

@@ -1,3 +1,171 @@
+# Git LFS tracking for binary/media types.
+#
+# IMPORTANT: .gitattributes pattern matching is CASE-SENSITIVE. A bare `*.mov`
+# does NOT match `CLIP.MOV`, and cameras/decks/phones routinely write UPPERCASE
+# extensions (XD4_6602.MXF, MVI_1487.MOV). To avoid that gap, every extension
+# below uses character classes — `*.[Mm][Oo][Vv]` — so all case permutations
+# (mov / MOV / Mov / …) are tracked. When adding a new binary type, follow the
+# same case-folding form. See VAULT-MEDIA-STORAGE.md § Enforcement.
+#
+# This is the first line of defense only; .github/scripts/check_large_files.py
+# is the case-agnostic backstop that blocks any >100 MB file lacking LFS
+# attributes and any file over the 2 GB GitHub ceiling.
+
+# Audio / video
+*.[Mm]4[Aa] filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Pp]3 filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Pp]4 filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Oo][Vv] filter=lfs diff=lfs merge=lfs -text
+*.[Aa][Vv][Ii] filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Kk][Vv] filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Xx][Ff] filter=lfs diff=lfs merge=lfs -text
+# AVCHD camera containers are written UPPERCASE (.MTS / .M2TS). `.mts`
+# (lowercase) is the TypeScript module-source extension, so the .MTS LFS rule is
+# intentionally UPPERCASE-ONLY — lowercase `.mts`/`.cts` are normalized as text
+# in the normalization section below, and no filter override is needed. A stray
+# lowercase camera `.mts` is still caught by check_large_files.py. .M2TS has no
+# source-format collision, so it stays case-folded.
+*.MTS filter=lfs diff=lfs merge=lfs -text
+*.[Mm]2[Tt][Ss] filter=lfs diff=lfs merge=lfs -text
+*.[Ww][Aa][Vv] filter=lfs diff=lfs merge=lfs -text
+*.[Aa][Aa][Cc] filter=lfs diff=lfs merge=lfs -text
+*.[Ff][Ll][Aa][Cc] filter=lfs diff=lfs merge=lfs -text
+*.[Oo][Gg][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Ww][Mm][Aa] filter=lfs diff=lfs merge=lfs -text
+
+# Images
+*.[Jj][Pp][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Jj][Pp][Ee][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Pp][Nn][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Gg][Ii][Ff] filter=lfs diff=lfs merge=lfs -text
+*.[Ww][Ee][Bb][Pp] filter=lfs diff=lfs merge=lfs -text
+*.[Bb][Mm][Pp] filter=lfs diff=lfs merge=lfs -text
+*.[Tt][Ii][Ff][Ff] filter=lfs diff=lfs merge=lfs -text
+*.[Tt][Ii][Ff] filter=lfs diff=lfs merge=lfs -text
+*.[Hh][Ee][Ii][Cc] filter=lfs diff=lfs merge=lfs -text
+*.[Hh][Ee][Ii][Ff] filter=lfs diff=lfs merge=lfs -text
+*.[Cc][Rr]2 filter=lfs diff=lfs merge=lfs -text
+*.[Pp][Ss][Dd] filter=lfs diff=lfs merge=lfs -text
+*.[Ss][Vv][Gg] filter=lfs diff=lfs merge=lfs -text
+
+# Documents
+*.[Pp][Dd][Ff] filter=lfs diff=lfs merge=lfs -text
+*.[Dd][Oo][Cc] filter=lfs diff=lfs merge=lfs -text
+*.[Dd][Oo][Cc][Xx] filter=lfs diff=lfs merge=lfs -text
+*.[Xx][Ll][Ss] filter=lfs diff=lfs merge=lfs -text
+*.[Xx][Ll][Ss][Xx] filter=lfs diff=lfs merge=lfs -text
+*.[Pp][Pp][Tt] filter=lfs diff=lfs merge=lfs -text
+*.[Pp][Pp][Tt][Xx] filter=lfs diff=lfs merge=lfs -text
+
+# Geospatial
+*.[Gg][Ee][Oo][Jj][Ss][Oo][Nn] filter=lfs diff=lfs merge=lfs -text
+*.[Kk][Mm][Ll] filter=lfs diff=lfs merge=lfs -text
+*.[Kk][Mm][Zz] filter=lfs diff=lfs merge=lfs -text
+*.[Ss][Hh][Pp] filter=lfs diff=lfs merge=lfs -text
+*.[Gg][Pp][Xx] filter=lfs diff=lfs merge=lfs -text
+
+# Archives
+*.[Zz][Ii][Pp] filter=lfs diff=lfs merge=lfs -text
+*.[Tt][Aa][Rr] filter=lfs diff=lfs merge=lfs -text
+*.[Gg][Zz] filter=lfs diff=lfs merge=lfs -text
+*.7[Zz] filter=lfs diff=lfs merge=lfs -text
+*.[Rr][Aa][Rr] filter=lfs diff=lfs merge=lfs -text
+
+# Binaries / databases / mail
+*.[Dd][Mm][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Ee][Xx][Ee] filter=lfs diff=lfs merge=lfs -text
+*.[Bb][Ii][Nn] filter=lfs diff=lfs merge=lfs -text
+*.[Dd][Bb] filter=lfs diff=lfs merge=lfs -text
+*.[Ss][Qq][Ll][Ii][Tt][Ee] filter=lfs diff=lfs merge=lfs -text
+*.[Ss][Qq][Ll][Ii][Tt][Ee]3 filter=lfs diff=lfs merge=lfs -text
+*.[Mm][Ss][Gg] filter=lfs diff=lfs merge=lfs -text
+*.[Ee][Mm][Ll] filter=lfs diff=lfs merge=lfs -text
+
+# Text file normalization — enforce LF line endings across platforms
+*.md text eol=lf
+*.txt text eol=lf
+*.py text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.json text eol=lf
+*.sh text eol=lf
+*.toml text eol=lf
+*.css text eol=lf
+*.js text eol=lf
+*.ts text eol=lf
+# TypeScript .mts/.cts module sources (lowercase). The .MTS media rule above is
+# uppercase-only, so these are plain text and never LFS — no filter override needed.
+*.mts text eol=lf
+*.cts text eol=lf
+*.ps1 text eol=lf
+*.psm1 text eol=lf
+*.psd1 text eol=lf
+*.bat text eol=lf
+*.cmd -text
+*.ini text eol=lf
+*.cfg text eol=lf
+*.conf text eol=lf
+*.csv -text
+*.tsv text eol=lf
+*.mdx text eol=lf
+
+# Tool configs with no extension, plus one XML that needs naming individually.
+# check_character_conformity.py judges only files whose `text` attribute is
+# set; anything unspecified is skipped and counted as a gap. Without these,
+# the configs added in #950 join that bucket.
+#
+# Leading slashes anchor these to the repo root. Without one, a .gitattributes
+# pattern with no slash is a BASENAME match at any depth -- the same rule as
+# .gitignore -- so a bare `.pylintrc` would also claim any nested one.
+#
+# NOT `*.xml`: RSS.xml is committed with CRLF, and a blanket `text eol=lf`
+# would rewrite its line endings as a side effect of declaring a config file.
+/.bandit text eol=lf
+/.pylintrc text eol=lf
+/.remarkrc text eol=lf
+/.shellcheckrc text eol=lf
+/.stylelintrc text eol=lf
+/ruleset.xml text eol=lf
+
+# =====================================================================
+# VAULT-LOCAL ADDITIONS (logan/obsidian) — everything above this line is
+# the canonical main ruleset, adopted verbatim; add vault rules HERE only
+# so the eventual logan/obsidian -> main merge stays suffix-only.
+# Later rules win: anchored guards below override generic classes above.
+# =====================================================================
+
+# --- .ollama model store: byte-exact or nothing ----------------------
+# 2026-08-11 incident: core.autocrlf CRLF conversion + truncation
+# corrupted model blobs while .ollama/models was briefly tracked. Blobs
+# are gitignored (.ollama/models/blobs/**); the tracked manifests are
+# extensionless JSON keyed into a content-addressed store. Everything
+# under .ollama is opted out of eol conversion, text diff/merge, and
+# every clean/smudge filter (including LFS).
+/.ollama/** -text -diff -merge -filter
+# The one human document in the store stays normal prose:
+/.ollama/OLLAMA.md text eol=lf
+
+# --- Repo plumbing must land LF on disk ------------------------------
+# Extensionless (no generic rule matches); core.autocrlf=true would
+# smudge a fresh Windows checkout to CRLF, breaking sh hooks. Anchored.
+/.githooks/* text eol=lf
+/.gitattributes text eol=lf
+/.gitignore text eol=lf
+/.editorconfig text eol=lf
+
+# --- Binary classes in the vault census with no rule above -----------
+# Declared binary (no eol/diff/merge mangling). Deliberately NOT LFS:
+# small classes; LFS stays reserved for plausibly-large media.
+*.[Ww][Oo][Ff][Ff] binary
+*.[Ww][Oo][Ff][Ff]2 binary
+*.[Tt][Tt][Ff] binary
+*.[Oo][Tt][Ff] binary
+*.[Ii][Cc][Oo] binary
+*.[Pp][Yy][Cc] binary
+*.[Ee][Tt][Ll] binary
+*.[Dd][Aa][Tt] binary
+*.[Ss][Qq][Ll][Ii][Tt][Ee]-[Ww][Aa][Ll] binary
+*.[Ss][Qq][Ll][Ii][Tt][Ee]-[Ss][Hh][Mm] binary
 
 # ---------------------------------------------------------------
 # THE WORLD IS QUIET HERE．ESTO PERPETUA!