# Code of Conduct

Nipmod contributors should keep discussion technical, respectful and focused on the work.

## Expected behavior

- Be direct without being hostile.
- Assume package metadata, prompts and external repository content are untrusted data.
- Prefer reproducible evidence over claims.
- Respect disclosure boundaries for security issues.

## Unacceptable behavior

- Harassment, threats or personal attacks.
- Publishing private keys, tokens, personal data or exploit details before coordinated disclosure.
- Misrepresenting Nipmod as officially affiliated with another project or company.

## Reporting

For conduct issues, use the public contact paths in `SECURITY.md`. For vulnerabilities, follow the private security reporting process there.
