# Contributing to HOLD

HOLD is being prepared for open-source release. The repository has not been published, so there is no issue tracker URL yet.

Use Node.js 24+, install exact dependencies with `npm ci`, run `npm test` and `npm run build`, and exercise the affected workflows. Native mobile changes require the separate checks in `docs/mobile.md`. Inference changes must be tested against actual models, with hardware, backend, model revision, quantization, and context size recorded.

Keep local chat independent of external services. New permissions must be narrow, visible, revocable, and enforced in the privileged process. Do not add model-directed shell execution, hidden network calls, telemetry, or paid work. Do not ship third-party assets or model weights without verified rights and attribution.

Describe the concrete behavior changed, relevant test results, and verification limitations in each contribution. Update the requirements matrix when feature status changes. Never replace an unverified state with a success claim because code exists. Keep secrets, private conversations, model files, SDKs, and signing keys out of source control.

The proposed contribution license is Apache-2.0. The owner must finalize the public contribution policy before accepting external contributions.