# Contributing

- Changes land via pull request — no direct pushes to `main`. Branch protection enforces
  this (see README.md, "Branch protection on `main`").
- This applies to the Claude bot too: it only ever opens PRs, never pushes or merges
  directly. `claude-bot`'s account is deliberately excluded from the merge whitelist, so a
  human always reviews and merges.
- Open a PR against `main` and wait for review before merging.