diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..b59b938
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,20 @@
+# Contributing
+
+Use this repository's issue forms for reproducible browser-node defects and
+documentation problems. Use the public IICP specification repository for
+protocol or cross-component proposals, the IICP forum for open-ended
+discussion, and GitHub's private security-advisory form for vulnerabilities.
+
+Do not include credentials, private topology, production records, task
+payloads or personal data in public issues. Participation does not confer
+protocol authority; public proposal decisions remain recorded in the owning
+issue or pull request under the current founder-led governance process.
+
+Keep changes within the experimental browser-node boundary. Protocol changes
+must first be accepted in the IICP specification repository. Run the package's
+quality checks before opening a pull request and include a content-free
+reproduction for behavior changes.
+
+## License
+
+By contributing, you agree your contributions are licensed under Apache-2.0.