# Contributing

Use only fake tokens and fictional entities in tests, issues, recordings, and screenshots. Add tests for every discovery or action-policy change. Run the commands in README before submitting. Never weaken host validation, expose arbitrary services, or make locks/alarm panels actionable.