The example app's web-config.json holds generated key material (statum-genkeys --out) and is machine-local; verification runs were creating it by hand and deleting it again. Ignore it.
@@ -1 +1,2 @@
builddir/
+example/web-config.json