docs: add public repository community profile

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,34 @@
+name: Bug report
+description: Report a reproducible, non-sensitive defect in OpenHunterAI.
+title: "[Bug]: "
+labels: [needs-triage]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not include target data, credentials, tokens, cookies, HAR, raw traffic, or exploit payloads. Use private security reporting for vulnerabilities.
+  - type: textarea
+    id: summary
+    attributes:
+      label: What happened?
+      description: Explain the observed behavior and the expected behavior.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Safe reproduction
+      description: List minimal, sanitized steps that reproduce the issue.
+      placeholder: "1. Start local stack\n2. ..."
+    validations:
+      required: true
+  - type: input
+    id: revision
+    attributes:
+      label: Revision
+      description: Commit SHA, release tag, or local branch.
+  - type: textarea
+    id: context
+    attributes:
+      label: Environment and sanitized logs
+      description: OS, browser, runtime versions, and sanitized errors only.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Private vulnerability report
+    url: https://github.com/LumosLab-Innovation/OpenHunterAI/security/advisories/new
+    about: Do not disclose vulnerabilities or sensitive evidence in public issues.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,26 @@
+name: Feature request
+description: Propose an improvement consistent with the authorized-testing scope.
+title: "[Feature]: "
+labels: [needs-triage]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user problem would this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe the smallest behavior that would solve the problem.
+    validations:
+      required: true
+  - type: checkboxes
+    id: scope
+    attributes:
+      label: Scope check
+      options:
+        - label: This does not require private-network scanning, unrestricted offensive behavior, destructive testing, or CI/CD-triggered retests.
+          required: true

.github/pull_request_template.md

@@ -0,0 +1,14 @@
+## Summary
+
+Describe the smallest user-visible or technical change.
+
+## Verification
+
+- [ ] Targeted tests or checks were run.
+- [ ] Documentation reflects behavior changes.
+- [ ] No raw credentials, cookies, tokens, HAR, sensitive traffic, or target data were added.
+
+## Security and scope
+
+- [ ] This preserves verified scope, authorization, sanitization, timeout, and approval controls.
+- [ ] This does not add private/internal scanning, destructive testing, credential stuffing, malware, persistence, or CI/CD-triggered retests.

CODE_OF_CONDUCT.md

@@ -0,0 +1,12 @@
+# Code of Conduct
+
+OpenHunterAI adopts the [Contributor Covenant Code of Conduct, version
+2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).
+
+Participation must remain respectful, constructive, and free from harassment.
+Maintainers may remove or reject conduct, content, or contributions that harm
+the community or conflict with this standard.
+
+Report conduct concerns privately through the repository owner's GitHub profile:
+<https://github.com/HungBil>. Reports will be handled respectfully and with
+appropriate confidentiality.

CONTRIBUTING.md

@@ -0,0 +1,21 @@
+# Contributing
+
+Issues for reproducible defects, documentation corrections, and product
+feedback are welcome. Use the templates and remove all target data,
+credentials, tokens, cookies, HAR, raw request/response content, and
+vulnerability payloads before submitting.
+
+Source contributions are temporarily paused while HungBil finalizes the
+contributor license agreement required for community contributions and future
+commercial licensing. Please open an issue before preparing a pull request.
+
+This repository's security scope and product limits are mandatory:
+
+- Do not weaken verification, scope, evidence sanitization, or approval gates.
+- Do not add private/internal scanning, destructive testing, credential
+  stuffing, malware, persistence, or CI/CD-triggered retests.
+- Keep tests targeted and update the governing documentation when behavior
+  changes.
+
+See [SECURITY.md](SECURITY.md) for private vulnerability reporting and
+[LICENSING.md](LICENSING.md) for license boundaries.

SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+Do not use public issues for a potential vulnerability, target details, raw
+traffic, credentials, tokens, cookies, or proof material.
+
+Use [GitHub private vulnerability reporting](https://github.com/LumosLab-Innovation/OpenHunterAI/security/advisories/new)
+instead. Include a minimal description, affected revision, safe reproduction
+steps, and impact. Remove or mask sensitive values before submitting.
+
+## Scope
+
+This policy covers OpenHunterAI source and its public documentation. Reports
+about third-party targets tested with OpenHunterAI must be sent to that target's
+owner through its published disclosure channel.
+
+## Response
+
+HungBil will acknowledge reports, assess impact, and coordinate a remediation
+or disclosure timeline where applicable. No bounty is promised by this policy.