- Add SECURITY.md with a private disclosure policy (GitHub Security Advisories + support@mem0.ai, 72h acknowledgement window). - Expand CONTRIBUTING.md: issue-first workflow, mandatory CLA, separate Python (hatch) and TypeScript (pnpm) SDK setup, good-practices section, and a PR checklist. - Update docs/contributing/development.mdx to match, adding the missing TypeScript SDK environment setup.