Harden repository for public publication

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @RomanOstr

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -0,0 +1,27 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff # v6
+        with:
+          enable-cache: true
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - run: uv sync --extra dev --frozen
+      - run: uv run pytest
+      - run: uv run ruff check .
+      - run: uv run mypy
+      - run: uv run dialogue-lab doctor

CODE_OF_CONDUCT.md

@@ -0,0 +1,8 @@
+# Code of conduct
+
+Be respectful, constructive, and focused on the technical work. Harassment,
+discrimination, threats, doxxing, and publication of private or sensitive data
+are not tolerated.
+
+Report conduct concerns privately to the repository owner. Maintainers may edit,
+remove, or reject contributions and participation that violate this standard.

CONTRIBUTING.md

@@ -0,0 +1,16 @@
+# Contributing
+
+Open an issue before substantial changes. Keep changes narrowly scoped, preserve
+the Google Drive canonical-source boundary, and never commit credentials,
+canonical document bodies, Case Log exports, or public Facebook content.
+
+Before proposing a change, run:
+
+```powershell
+uv run pytest
+uv run ruff check .
+uv run mypy
+uv run dialogue-lab doctor
+```
+
+Contributions are accepted only under the repository's proprietary license.

LICENSE

@@ -0,0 +1,5 @@
+Copyright (c) 2026 Dialogue Lab. All rights reserved.
+
+This software and its documentation are proprietary. No permission is granted
+to use, copy, modify, distribute, sublicense, or sell any portion of this
+repository without prior written permission from the copyright holder.

SECURITY.md

@@ -0,0 +1,8 @@
+# Security policy
+
+Do not open a public issue for a suspected vulnerability or exposed sensitive
+data. Report it privately through GitHub's private vulnerability reporting for
+this repository.
+
+Include the affected component, reproduction steps, impact, and any suggested
+mitigation. Maintainers will acknowledge a complete report as soon as practical.

pyproject.toml

@@ -10,6 +10,12 @@ readme = "README.md"
 requires-python = ">=3.12"
 license = { text = "Proprietary" }
 authors = [{ name = "Dialogue Lab" }]
+classifiers = [
+  "License :: Other/Proprietary License",
+  "Programming Language :: Python :: 3.12",
+  "Typing :: Typed",
+]
+urls = { Repository = "https://github.com/RomanOstr/HasbaraTops" }
 dependencies = ["tzdata==2026.3"]
 
 [project.optional-dependencies]