- what changed
- why it changed
- exact command(s) run
- result(s)
- docs updated: yes/no
- env registry updated if needed: yes/no
- runtime/output policy updated if needed: yes/no
- public-boundary docs updated if positioning, support, privacy, rights, or third-party claims changed: yes/no
- security reporting docs updated if the vulnerability intake path or fallback guidance changed: yes/no
- I confirm I have the right to submit this contribution
- I confirm this contribution does not violate third-party rights, employer obligations, or confidentiality duties
- I agree that this contribution is submitted under the repository license
- I did not include runtime output, secrets, or unrelated cleanup
- unresolved risks
- follow-up items if any
- if this change affects vulnerability intake or private disclosure handling, note whether a maintainer follow-up is still required before calling the security surface closed