diff --git a/.gitignore b/.gitignore
index 0045c581..dd623f82 100644
--- a/.gitignore
+++ b/.gitignore
@@ -74,3 +74,27 @@ reconciliation/
 *.payload.json
 *.payload.sha256
 audit_log.jsonl
+
+# cross-chain-pmm-lps-publish: git worktree under that repo — not a parent submodule
+cross-chain-pmm-lps-publish/
+
+# Local scratch (never commit)
+.tmp-*.cjs
+.codex/
+.venv-checkjson/
+
+# Operator / runtime env snapshots under reports/ (sensitive; regenerate from hosts)
+reports/status/operator-*.env
+reports/status/operator-runtime*.env
+reports/status/chain138_aave_runtime.env
+reports/status/*runtime-env*.env
+reports/status/ei-matrix-eth-send*
+reports/status/token-aggregation-*.tar.gz
+config/production/*did-secrets.env
+
+# Bulky one-off local outputs (re-run scripts to restore)
+output/omnl-e2e-*.zip
+output/omnl-e2e-*/
+output/office22-*.zip
+output/settlement-events/
+output/transaction-package-*/
diff --git a/.gitmodules b/.gitmodules
index e678abfc..47136bdc 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -4,7 +4,7 @@
 	# Primary integration remote is Gitea; use GitHub only as an optional mirror when available.
 [submodule "mcp-proxmox"]
 	path = mcp-proxmox
-	url = https://github.com/gilby125/mcp-proxmox.git
+	url = https://gitea.d-bis.org/d-bis/mcp-proxmox.git
 [submodule "smom-dbis-138"]
 	path = smom-dbis-138
 	url = git@github.com:Order-of-Hospitallers/smom-dbis-138.git
diff --git a/cross-chain-pmm-lps-publish b/cross-chain-pmm-lps-publish
deleted file mode 160000
index d0c3692f..00000000
--- a/cross-chain-pmm-lps-publish
+++ /dev/null
@@ -1 +0,0 @@
-Subproject commit d0c3692f64e8c9872ef9d67f752a8c5a2f70a7e5
diff --git a/mcp-proxmox b/mcp-proxmox
index b2fde60e..2b629ba4 160000
--- a/mcp-proxmox
+++ b/mcp-proxmox
@@ -1 +1 @@
-Subproject commit b2fde60eeea5ac1e980309d909412463d4465b8d
+Subproject commit 2b629ba446f5d9ec5c34b1cbcc65fade2afbb376