From 74549deeeee8dbb49050c466984921de216a598f Mon Sep 17 00:00:00 2001
From: Codex <codex@local>
Date: Mon, 20 Jul 2026 03:08:18 +0300
Subject: [PATCH] Harden repository for public GitHub publication

---
 .github/CODEOWNERS       |  1 +
 .github/dependabot.yml   | 10 ++++++++++
 .github/workflows/ci.yml | 27 +++++++++++++++++++++++++++
 CODE_OF_CONDUCT.md       |  8 ++++++++
 CONTRIBUTING.md          | 16 ++++++++++++++++
 LICENSE                  |  5 +++++
 SECURITY.md              |  8 ++++++++
 pyproject.toml           |  6 ++++++
 8 files changed, 81 insertions(+)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 CODE_OF_CONDUCT.md
 create mode 100644 CONTRIBUTING.md
 create mode 100644 LICENSE
 create mode 100644 SECURITY.md

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..8db4288
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @RomanOstr
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..bc22ecb
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..4226567
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,27 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
+        with:
+          enable-cache: true
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - run: uv sync --extra dev --frozen
+      - run: uv run pytest
+      - run: uv run ruff check .
+      - run: uv run mypy
+      - run: uv run dialogue-lab doctor
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
new file mode 100644
index 0000000..8624369
--- /dev/null
+++ b/CODE_OF_CONDUCT.md
@@ -0,0 +1,8 @@
+# Code of conduct
+
+Be respectful, constructive, and focused on the technical work. Harassment,
+discrimination, threats, doxxing, and publication of private or sensitive data
+are not tolerated.
+
+Report conduct concerns privately to the repository owner. Maintainers may edit,
+remove, or reject contributions and participation that violate this standard.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..0127de0
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,16 @@
+# Contributing
+
+Open an issue before substantial changes. Keep changes narrowly scoped, preserve
+the Google Drive canonical-source boundary, and never commit credentials,
+canonical document bodies, Case Log exports, or public Facebook content.
+
+Before proposing a change, run:
+
+```powershell
+uv run pytest
+uv run ruff check .
+uv run mypy
+uv run dialogue-lab doctor
+```
+
+Contributions are accepted only under the repository's proprietary license.
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..4021c65
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,5 @@
+Copyright (c) 2026 Dialogue Lab. All rights reserved.
+
+This software and its documentation are proprietary. No permission is granted
+to use, copy, modify, distribute, sublicense, or sell any portion of this
+repository without prior written permission from the copyright holder.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..638b411
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,8 @@
+# Security policy
+
+Do not open a public issue for a suspected vulnerability or exposed sensitive
+data. Report it privately through GitHub's private vulnerability reporting for
+this repository.
+
+Include the affected component, reproduction steps, impact, and any suggested
+mitigation. Maintainers will acknowledge a complete report as soon as practical.
diff --git a/pyproject.toml b/pyproject.toml
index 30f42d3..767c71a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,6 +10,12 @@ readme = "README.md"
 requires-python = ">=3.12"
 license = { text = "Proprietary" }
 authors = [{ name = "Dialogue Lab" }]
+classifiers = [
+  "License :: Other/Proprietary License",
+  "Programming Language :: Python :: 3.12",
+  "Typing :: Typed",
+]
+urls = { Repository = "https://github.com/RomanOstr/HasbaraTops" }
 dependencies = ["tzdata==2026.3"]
 
 [project.optional-dependencies]