diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..0fdc80a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,20 @@
+# Environment files — never commit API keys or secrets
+.env
+.env.*
+!.env.example
+
+# Editor and OS artifacts
+.DS_Store
+Thumbs.db
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Node (if tooling is added later)
+node_modules/
+npm-debug.log*
+
+# Build output from deploy-docs.yml (local runs)
+_site/
diff --git a/asm/openapi.yaml b/asm/openapi.yaml
index af46c80..17214f9 100644
--- a/asm/openapi.yaml
+++ b/asm/openapi.yaml
@@ -456,6 +456,10 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/Error'
+          example:
+            error:
+              code: bad_request
+              message: "targets must contain at least one entry"
     RateLimited:
       description: Rate limit exceeded
       headers:
@@ -467,6 +471,10 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/Error'
+          example:
+            error:
+              code: rate_limited
+              message: "Rate limit exceeded. Retry after 42 seconds."
 
   schemas:
     # ── Enums ──────────────────────────────────────────────────────────────────