Keep changes focused and describe their operational failure modes. Run the Release build, tests, formatting check, dependency audit, and Compose configuration check before opening a pull request. Never commit .env, credentials, customer files, malware samples, OCR output, or exported object-store data.