diff --git a/.dockerignore b/.dockerignore
index cf87a52..2cbe632 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -18,8 +18,11 @@ instance/
 *.db
 
 # 交付物 & 生成测试脚本（非源码）
+# NOTE: never use a bare '*.sh' here — that would also exclude the project's
+# own start.sh which the Dockerfile COPYs in. Be specific about which .sh
+# files are user-generated artifacts.
 deliverables/
-*.sh
+deliverables/*.sh
 /tmp/
 
 # 构建中间产物