Contributing

Thanks for helping! Please read AGENTS.md (the rules apply to humans too) and docs/IMPLEMENTATION-PLAN.md.

1. Open an issue for anything non-trivial before coding.
2. Branch from main; keep PRs small; use Conventional Commits.
3. Add tests with the change; run make test lint security.
4. Sign off commits (git commit -s): this certifies the DCO.
5. Security issues: follow SECURITY.md, not public issues.

Be kind: we follow the Contributor Covenant 2.1 (CODE_OF_CONDUCT.md).