Use Python 3.11 or newer and keep changes inside the deterministic REST execution scope. Do not submit credentials, private endpoints, production data, generated evidence, local databases, virtual environments, coverage output, wheels, executables, or Release archives.
Before opening a pull request, run:
python -m ruff format --check .
python -m ruff check .
python -m pytest -q
python scripts/validate_schemas.py
python scripts/validate_skill.py .
python scripts/security_scan.py .
Add a failing regression test before a behavior change or bug fix. Preserve ATIR compatibility, deterministic assertions, production blocking, read-only database gates, redaction, cleanup ownership, and evidence integrity. Describe the observed failure, the smallest fix, and the verification performed.