Introduce the Hebrus engine compatibility bridge

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,140 @@
+name: Bug report
+description: Report a reproducible Hebrus runtime, build, API, model-loading, or compatibility problem.
+title: "[Bug]: "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping improve Hebrus. Search existing issues before filing a report.
+
+        For a possible vulnerability, stop here and follow the [security policy](https://github.com/andreaborio/ds4/blob/main/SECURITY.md). Do not post vulnerability details, secrets, private data, model weights, or model blobs in an issue.
+
+  - type: checkboxes
+    id: prerequisites
+    attributes:
+      label: Prerequisites
+      options:
+        - label: I searched the open and closed issues for an existing report.
+          required: true
+        - label: This is not an undisclosed security vulnerability.
+          required: true
+        - label: I will not attach model weights, model blobs, secrets, or private data.
+          required: true
+
+  - type: textarea
+    id: summary
+    attributes:
+      label: Problem summary
+      description: Describe the failure and its impact in a few precise sentences.
+      placeholder: What failed, where, and how does it affect you?
+    validations:
+      required: true
+
+  - type: dropdown
+    id: component
+    attributes:
+      label: Affected area
+      options:
+        - CLI or inference engine
+        - Server or API
+        - Agent mode
+        - Metal backend
+        - SSD streaming or ExpertMajor
+        - GGUF, conversion, or model download
+        - Build, tests, or documentation
+        - Compatibility alias or legacy interface
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: build
+    attributes:
+      label: Build identity
+      description: Include the exact commit, whether the tree is dirty, and `./hebrus --build-info` when available.
+      render: shell
+      placeholder: |
+        git rev-parse HEAD
+        git status --short
+        ./hebrus --build-info
+    validations:
+      required: true
+
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment and resolved execution plan
+      description: Include Mac model, Apple chip, RAM, macOS build, power mode, selected backend, storage, and the resolved resident/SSD plan. For non-production reference paths, identify the backend explicitly.
+      placeholder: |
+        Hardware:
+        Memory:
+        OS build:
+        Power mode:
+        Storage/model volume:
+        Backend and resolved plan:
+    validations:
+      required: true
+
+  - type: textarea
+    id: model
+    attributes:
+      label: Model artifact identity
+      description: If model-backed, include family, exact filename, byte size, SHA-256, provenance, and quantization. Do not upload or link redistributed weights unless you are authorized to do so. Write "Not model-backed" when inapplicable.
+      placeholder: |
+        Family:
+        Filename:
+        Size in bytes:
+        SHA-256:
+        Provenance/conversion:
+        Quantization:
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Minimal reproduction
+      description: Provide the smallest sanitized command or request that reproduces the problem, including relevant flags and environment variables.
+      render: shell
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What should have happened?
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior and diagnostics
+      description: Include the exact error and the smallest useful log excerpt. Redact tokens, paths containing personal information, prompts, and private data.
+    validations:
+      required: true
+
+  - type: dropdown
+    id: executable
+    attributes:
+      label: Entry point used
+      options:
+        - hebrus
+        - ds4 compatibility alias
+        - Library or embedded API
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: compatibility
+    attributes:
+      label: Compatibility observations
+      description: Note whether the same problem occurs through the canonical Hebrus entry point and any applicable `ds4*` compatibility alias. Include API, exit-code, environment-variable, or on-disk compatibility details when relevant.
+
+  - type: textarea
+    id: additional
+    attributes:
+      label: Additional context
+      description: Add links to minimal source patches or public logs if useful. Do not attach model files, binaries, large generated outputs, or sensitive data.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security policy
+    url: https://github.com/andreaborio/ds4/blob/main/SECURITY.md
+    about: Read the private-reporting status before reporting a vulnerability. Do not disclose vulnerability details in a public issue.
+  - name: Contribution guide
+    url: https://github.com/andreaborio/ds4/blob/main/CONTRIBUTING.md
+    about: Review the contribution, validation, evidence, and compatibility requirements before opening a pull request.

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,26 @@
+name: Documentation
+description: Report missing, incorrect, or unclear Hebrus documentation
+title: "[Docs]: "
+labels: ["documentation"]
+body:
+  - type: input
+    id: location
+    attributes:
+      label: Page or section
+    validations:
+      required: true
+  - type: textarea
+    id: problem
+    attributes:
+      label: What is wrong or unclear?
+    validations:
+      required: true
+  - type: textarea
+    id: proposed
+    attributes:
+      label: Suggested correction
+      description: Paste-ready wording is welcome, but not required.
+  - type: input
+    id: version
+    attributes:
+      label: Hebrus version or commit

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,109 @@
+name: Feature request
+description: Propose a focused Hebrus capability or support-contract change.
+title: "[Feature]: "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Explain the user problem before the implementation. Hebrus prioritizes Apple Metal inference and SSD streaming while preserving deliberate compatibility and upstream attribution.
+
+        Performance claims belong in the dedicated performance report. Security reports must follow [SECURITY.md](https://github.com/andreaborio/ds4/blob/main/SECURITY.md) and must not be disclosed here.
+
+  - type: checkboxes
+    id: prerequisites
+    attributes:
+      label: Prerequisites
+      options:
+        - label: I searched existing issues and discussions for this proposal.
+          required: true
+        - label: This request contains no undisclosed vulnerability details, secrets, or model blobs.
+          required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem and use case
+      description: Who needs this, what are they trying to do, and what limitation exists today?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe observable behavior and acceptance criteria. Keep implementation details separate when possible.
+    validations:
+      required: true
+
+  - type: dropdown
+    id: component
+    attributes:
+      label: Primary area
+      options:
+        - CLI or inference engine
+        - Server or API
+        - Agent mode
+        - Metal backend
+        - SSD streaming or ExpertMajor
+        - GGUF, conversion, or model distribution
+        - Build, tests, or documentation
+        - Compatibility or migration
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: contract
+    attributes:
+      label: Expected support-contract impact
+      options:
+        - No contract change
+        - Additive behavior within the current production path
+        - Experimental or reference-only path
+        - Compatibility or serialized-format change
+        - Backend or model-family support change
+        - Unsure
+    validations:
+      required: true
+
+  - type: dropdown
+    id: upstreamability
+    attributes:
+      label: Upstreamability classification
+      description: Choose the classification defined by the contribution policy.
+      options:
+        - General, reproducible, and safe for the affected backends
+        - Potentially general, but not yet proven across the affected paths
+        - Model-, quant-, or hardware-specific research
+        - Equivalent change already exists upstream
+        - Measured regression without a necessary correctness fix
+    validations:
+      required: true
+
+  - type: textarea
+    id: compatibility
+    attributes:
+      label: Compatibility and migration impact
+      description: Cover canonical `hebrus*` interfaces, `ds4*` aliases, `DS4_*` variables, serialized identifiers, GGUF metadata, disk-KV data, API behavior, and exit codes as applicable. State "None" when unaffected.
+    validations:
+      required: true
+
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Validation and evidence plan
+      description: List model-free tests, required model artifacts and hashes, correctness checks, performance frontiers, documentation, and migration coverage needed to accept this feature.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Describe workarounds or smaller designs and why they do not solve the use case.
+
+  - type: textarea
+    id: references
+    attributes:
+      label: References
+      description: Link specifications, prior art, source code, or public measurements. Do not attach model weights, local benchmark residue, or large binaries.

.github/ISSUE_TEMPLATE/model-support.yml

@@ -0,0 +1,44 @@
+name: Model support
+description: Request or report compatibility for a model artifact
+title: "[Model]: "
+labels: ["model-support"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Hebrus supports only explicitly qualified artifacts. Do not attach weights, private prompts, secrets, traces, or KV snapshots.
+  - type: input
+    id: artifact
+    attributes:
+      label: Artifact identity
+      description: Repository, immutable revision, exact filename, byte size, and SHA-256.
+    validations:
+      required: true
+  - type: input
+    id: build
+    attributes:
+      label: Hebrus build
+      description: Commit plus `hebrus --build-info` and `hebrus --capabilities=json`.
+    validations:
+      required: true
+  - type: input
+    id: hardware
+    attributes:
+      label: Hardware and OS
+      placeholder: Mac model, chip, unified memory, macOS version
+    validations:
+      required: true
+  - type: textarea
+    id: result
+    attributes:
+      label: Observed behavior
+      description: Include the exact admission or runtime error and the command with personal paths removed.
+    validations:
+      required: true
+  - type: checkboxes
+    id: hygiene
+    attributes:
+      label: Privacy check
+      options:
+        - label: I removed prompts, tokens, personal paths, model weights, traces, and cache payloads.
+          required: true