By contributing to this repository, you certify that your contribution complies with the Developer Certificate of Origin (DCO), version 1.1.
Sign every commit with:
git commit -sThis adds a Signed-off-by trailer to your commit.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project is licensed under the repository license (Apache-2.0).
- Include focused tests for behavior changes.
- Keep migrations idempotent and backward-safe.
- Preserve fail-closed semantics for coordination/provenance flows.
- Update docs when CLI or policy behavior changes.