diff --git a/.gitignore b/.gitignore
index 50fad0e..24690f7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,12 @@ Thumbs.db
 .vscode/
 *.sublime-*
 
+# Agent scratch (worktrees of this repo, created and destroyed by
+# in-flight tooling). Unanchored: .gitignore patterns already match at
+# every depth, so no prefix is wanted here. This is not a .dockerignore
+# entry and must not be given a `**/` prefix on the way into one.
+.claude/
+
 # Environment / secrets
 .env
 .env.*
diff --git a/TODO.md b/TODO.md
index 7fecf2b..7ce71e1 100644
--- a/TODO.md
+++ b/TODO.md
@@ -31,6 +31,10 @@ P2: security: per-IP rate limiting on the image routes
 
 # Completed Steps
 
+- 2026-10-04 `.gitignore` ignores `.claude/` (closes #204): the entry and its
+  comment are copied from the canonical `.gitignore` in `sneak/prompts`,
+  unanchored so it matches at every depth. `.dockerignore` already has
+  `.claude`.
 - 2026-10-04 `REPO_POLICIES.md` matches the canonical copy again (closes #196):
   it is replaced, unchanged, by `prompts/REPO_POLICIES.md` from `sneak/prompts`
   `main`. The rules it adds that pixa's tree breaks are filed: