Governance and contribution

SDK-Rust is AI-first but evidence-gated. Agents may plan, implement, review, push, and merge routine issue-linked work into protected develop after the required checks pass. Humans retain authority over release, publication, repository administration, security disclosure, legal-risk acceptance, and promotion to main.

Specification-driven flow

issue → research → constraints → OpenSpec contract → preflight
      → implementation → verification → review → protected develop
      → production evidence → human release decision

Important repository references:

• Contributing
• Governance
• Security
• Release policy
• AI Software Factory
• Architecture blueprint
• Constraints and limitations

Documentation changes use the same issue, OpenSpec, signed/DCO commit, local review, exact-head CI, and protected merge controls as code changes.