Planning and the backlog for this project are maintained privately. They are not published here, and
this page is not a summary of them. SECURITY-DOCS-POLICY.md states the
rule that decides what this repository publishes and what it withholds.
Open a pull request. Nothing here requires a backlog item first, and you do not need one to be accepted.
Post a bug report, but never a vulnerability, in the
Bugs category of GitHub Discussions,
as CONTRIBUTING.md describes.
Report a security issue through the private advisory process in
SECURITY.md. Do not open a pull request or a public report for one.
Commits, pull requests, ADRs and comments across this repository cite item numbers in the form
BACKLOG #N. Those numbers index the private ledger, so they will not resolve to anything in this
repository. That is deliberate, not a broken link.
The citation still earns its place: it records that a change came from planned work, and it is the key a maintainer uses to find that planning. An outside reader can read the change on its own terms without it.