# Contributing

## Licence of contributions

By submitting a contribution — a patch, a pull request, a suggested change —
you agree that it is licensed under the same **MIT License** that covers this
repository ([`LICENSE`](LICENSE)), and that you have the right to license it
that way. Inbound = outbound; there is no separate CLA.

## Practical notes

- One concept per change.
- Match the surrounding code style.
- Add or update tests for behaviour changes.
- New source files begin with `// SPDX-License-Identifier: MIT`.
- The signing / verification path handles trust decisions — changes there
  need a clear threat-model rationale, not just a passing test.

Contact: demiralp@fedem.eu