- Open an issue describing the user-visible defect or bounded capability.
- Add or update a regression test before changing signal-bearing behavior.
- Keep inputs, outputs, failure modes, and evidence boundaries explicit.
- Run the repository's documented validation command from a clean checkout.
- Do not add provider credentials, generated runtime state, fabricated metrics, or unsupported production claims.
- Update integration and deployment documentation when a public contract changes.
Pull requests should contain: problem, reproduction, change, verification, compatibility impact, and remaining risk.