Milestone 2: codegen via daml-lf-archive (SCU-aware) + dpm component

.gitattributes

@@ -0,0 +1,15 @@
+# The bindings crates' src/lib.rs is checked-in generated output (from
+# `dpm-codegen-rust`). Mark it generated so GitHub keeps it out of the language
+# stats and collapses it in PR diffs.
+crates/canton-splice-*/src/lib.rs linguist-generated=true
+crates/canton-quickstart-*/src/lib.rs linguist-generated=true
+
+# Vendored upstream schemas are verified byte-for-byte against SHA256SUMS, so
+# they must not be line-ending-converted on checkout. Git on Windows defaults
+# to `core.autocrlf=true`, which rewrites LF to CRLF and changes every hash —
+# the tree looks unmodified and every checksum fails. `-text` pins the working
+# copy to exactly what was vendored.
+crates/canton-proto/proto/** -text
+
+# The fixture DAR is a zip archive; never treat it as text.
+testdata/*.dar binary

.gitignore

@@ -24,3 +24,7 @@
 # OS junk.
 .DS_Store
 Thumbs.db
+
+# scala-cli build caches (tools/lf-oracle).
+.bsp/
+.scala-build/

CONTRIBUTING.md

@@ -38,7 +38,16 @@ Guidelines:
   [`docs/adr/`](docs/adr/README.md) — add a new numbered record rather than
   editing an old one.
 - **Versioning**: all `canton-*` crates release in lockstep with one shared
-  version ([ADR-0005](docs/adr/0005-lockstep-versioning.md)).
+  version ([ADR-0005](docs/adr/0005-lockstep-versioning.md)). Publishing has an
+  order and a checklist — [RELEASING.md](RELEASING.md); a crates.io version
+  cannot be taken back, and half a family published in the wrong order leaves
+  the rest unpublishable until the next version.
+- **CI actions are pinned to a commit**, with the human-readable version in a
+  trailing comment (`actions/checkout@11d5960… # v4`). A tag is mutable: whoever
+  controls the action's repository can repoint `v4` at anything, and it would
+  run with our checkout and our secrets. To bump one, resolve the new tag
+  (`gh api repos/<owner>/<repo>/git/ref/tags/<tag> --jq .object.sha`) and update
+  both the SHA and the comment.
 
 ## Security issues