- Create a branch from
mainand describe the behavior you are changing. - Keep raw datasets, camera recordings, logs, credentials, and local build output out of commits.
- Run
npm run privacy:audit,npm run build, andnpm testbefore opening a pull request. - For model changes, record the dataset source, class mapping, split, device, and evaluation metrics without including private paths.
- Do not present experimental PPE classes as compliance-certified detection. Include representative negative cases and independent test data.
Dataset maintenance code must preserve ZIP traversal protection, annotation validation, managed-dataset replacement checks, and portable YAML generation.