Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0

CONTRIBUTING.md

@@ -24,7 +24,9 @@ python -m ruff check backend/src backend/tests node-agent/src runtime-worker/src
 python -m mypy backend/src
 python -m mypy --config-file node-agent/pyproject.toml node-agent/src
 python -m mypy --config-file runtime-worker/pyproject.toml runtime-worker/src
-python -m pytest backend/tests node-agent/tests runtime-worker/tests -q
+(cd backend && python -m pytest -q)
+(cd node-agent && python -m pytest -q)
+(cd runtime-worker && python -m pytest -q)
 cd frontend && npm test -- --run && npm run build
 ```
 
@@ -35,6 +37,8 @@ production evidence, model weights, generated backups or personal data.
 
 - Applications depend on versioned capabilities, never concrete model names.
 - Production identities use exact commits, artifact digests and image digests.
+- Document source, revision, license and checksum expectations for models and runtime artifacts.
+- Use synthetic identities and configurable node addresses in tests and examples.
 - No production promotion occurs without evidence and explicit approval.
 - `trust_remote_code` stays false; untrusted model code is not executed.
 - Agents and runtime workers use narrow identities and least privilege.