Project

Repository policy is part of the product evidence, not an afterthought.

Contributing

Start with the repository setup, focused tests, and required quality commands in the contributing guide. Changes to browser behavior need deterministic evidence and an updated browser note when appropriate.

Security

Report vulnerabilities through the private path documented in the security policy. Do not disclose vulnerability details in a public issue.

Real-device QA

Desktop fixtures are not physical-device results. The real-device QA matrix keeps iPhone, iPad, Android, installed PWA, WebView, and external-keyboard work marked manual pending until a person records exact device evidence.