Contributing

Cursors is at the charter-and-semantics stage. Discussion, threat analysis, test cases, protocol critique, and small executable experiments are welcome once collaboration channels open.

The repository currently has no open-source license. Until a license is selected, do not submit substantial copied or third-party code and do not assume permission to redistribute the repository. License selection is tracked as an explicit project decision rather than being guessed in the founding commit.

For code changes:

1. state the invariant or user-visible capability first;
2. add a failing behavior-oriented test;
3. implement the smallest complete behavior;
4. run npm run check;
5. update diagrams and protocol documents when semantics change.

Security-sensitive findings should follow SECURITY.md, not begin as a public exploit description.