docs(contributing): org-wide CONTRIBUTING.md — Gitea-canonical SCM + branch+PR+merge-commit + no-force-push #2

Merged
claude-ceo-assistant merged 2 commits from docs/contributing-md-2026-05-06 into main 2026-05-07 11:21:48 +00:00

First org-wide CONTRIBUTING.md. GitHub renders <org>/.github/CONTRIBUTING.md as the default contributor guide for any repo in the org that doesn't ship its own; mirroring the path on Gitea now so once GitHub access is restored and repo-sync activates, it lands in the right place automatically.

In-scope

  • Where the code lives — Gitea canonical (post-2026-05-06 GitHub org suspension), GitHub mirror is read-only OSS face. Non-security issues at git.moleculesai.app/molecule-ai/internal.
  • How we ship — branch off main (or staging on platform repos), conventional branch names, imperative commit messages, merge by merge commit (NOT squash), no force-push to main/staging.
  • Tests + CI + review — run locally first; fix root cause not --no-verify; one-business-day review SLA on non-trivial PRs.
  • What we do NOT require — no CLA, no bug bounty, no GPG enforcement, no mandatory issue-template fields. Called out explicitly so contributors don't waste time on absent features.
  • Boundaries — no committed secrets, no shared-env cleanup, no long-running background jobs in tests.
  • Repo-specific overrides win when they disagree.

Length

56 lines. Orchestrator target was ~80; landed leaner because the post-suspension reality + merge-commit shape are the load-bearing bits.

Independent of

PR-B (SECURITY.md) — opened separately as instructed; not stacked.

Reviewer notes

No claims of features we don't have (GPG / CLA / bounty all explicitly absent). The SECURITY.md placeholder address (security@moleculesai.app) flagged for Hongming confirmation in PR-B's description.

🤖 Generated with Claude Code

First org-wide `CONTRIBUTING.md`. GitHub renders `<org>/.github/CONTRIBUTING.md` as the default contributor guide for any repo in the org that doesn't ship its own; mirroring the path on Gitea now so once GitHub access is restored and repo-sync activates, it lands in the right place automatically. ## In-scope - **Where the code lives** — Gitea canonical (post-2026-05-06 GitHub org suspension), GitHub mirror is read-only OSS face. Non-security issues at `git.moleculesai.app/molecule-ai/internal`. - **How we ship** — branch off `main` (or `staging` on platform repos), conventional branch names, imperative commit messages, merge by merge commit (**NOT squash**), no force-push to `main`/`staging`. - **Tests + CI + review** — run locally first; fix root cause not `--no-verify`; one-business-day review SLA on non-trivial PRs. - **What we do NOT require** — no CLA, no bug bounty, no GPG enforcement, no mandatory issue-template fields. Called out explicitly so contributors don't waste time on absent features. - **Boundaries** — no committed secrets, no shared-env cleanup, no long-running background jobs in tests. - **Repo-specific overrides win** when they disagree. ## Length 56 lines. Orchestrator target was ~80; landed leaner because the post-suspension reality + merge-commit shape are the load-bearing bits. ## Independent of PR-B (`SECURITY.md`) — opened separately as instructed; not stacked. ## Reviewer notes No claims of features we don't have (GPG / CLA / bounty all explicitly absent). The `SECURITY.md` placeholder address (`security@moleculesai.app`) flagged for Hongming confirmation in PR-B's description. 🤖 Generated with Claude Code
claude-ceo-assistant added 1 commit 2026-05-07 01:39:07 +00:00
First content for `Molecule-AI/.github/CONTRIBUTING.md`. GitHub
renders `<org>/.github/CONTRIBUTING.md` as the default contributor
guide for any repo in the org that doesn't ship its own.

## What's in scope

- **Where the code lives**: Gitea is canonical (post-2026-05-06 GitHub
  org suspension); GitHub mirror is read-only OSS face. Non-security
  issues at git.moleculesai.app/molecule-ai/internal.
- **How we ship**: branch off main (or staging on platform repos),
  conventional branch names, imperative commit messages, merge by
  merge commit (NOT squash), no force-push to main/staging.
- **Tests + CI + review**: run locally first; fix root cause not
  --no-verify; one-business-day review SLA on non-trivial PRs.
- **What we do NOT require**: no CLA, no bug bounty, no GPG
  enforcement, no mandatory issue templates. Explicit so
  contributors don't waste time on absent features.
- **Boundaries**: no committed secrets, no shared-env cleanup, no
  long-running background jobs in tests.
- **Repo-specific overrides win** when they disagree.

## Length

56 lines (orchestrator target was ~80; landed leaner because the
post-suspension reality + merge-commit shape are the load-bearing
bits and the rest is conventional-wisdom that doesn't need depth).

## Out of scope (parked, file when needed)

- Per-repo CONTRIBUTING overrides — tracked individually.
- Issue + PR templates — would live in profile/.github/ or per-repo;
  current per-repo guidance is fine.
- GPG / CLA / bounty — explicitly called out as NOT required so
  contributors don't infer absence as oversight.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
hongming was assigned by claude-ceo-assistant 2026-05-07 10:29:25 +00:00
claude-ceo-assistant added 1 commit 2026-05-07 11:21:42 +00:00
Ghost approved these changes 2026-05-07 11:21:45 +00:00
Ghost left a comment
First-time contributor

Org-wide CONTRIBUTING.md companion to SECURITY.md (#3 just merged). Gitea-canonical + branch+PR+merge-commit + no-force-push policy. Hongming-confirmed via 'always merge commits' chat 2026-05-07.

Org-wide CONTRIBUTING.md companion to SECURITY.md (#3 just merged). Gitea-canonical + branch+PR+merge-commit + no-force-push policy. Hongming-confirmed via 'always merge commits' chat 2026-05-07.
claude-ceo-assistant merged commit b988ba0fca into main 2026-05-07 11:21:48 +00:00
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/.github#2
No description provided.