Release v0.0.2

CHANGELOG.md

@@ -7,7 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 once it reaches `1.0.0`. Pre-`1.0.0` releases may contain breaking changes
 in any minor version bump — see the release notes for details.
 
-## [0.0.1] — 2026-05-18
+## [0.0.2] - 2026-05-20
+
+### Added
+
+- `CODE_OF_CONDUCT.md` adopting the [Contributor Covenant 2.1][cc21] by
+  reference, with `conduct@spellguard.ai` as the reporting channel.
+  Linked from `CONTRIBUTING.md`.
+
+[cc21]: https://www.contributor-covenant.org/version/2/1/code_of_conduct/
+
+## [0.0.1] - 2026-05-18
 
 Initial OSS export of the Spellguard subset: client middleware, Verifier
 proxy server, cTLS, AMP, LangChain / OpenAI / OpenClaw adapters, policy

CODE_OF_CONDUCT.md

@@ -0,0 +1,51 @@
+# Code of Conduct
+
+This project adopts the [Contributor Covenant, version 2.1][cc21] as its
+Code of Conduct. By participating in this project — through issues, pull
+requests, discussions, or any other channel maintained by the Spellguard
+project — you agree to follow its terms.
+
+The full text is published at
+<https://www.contributor-covenant.org/version/2/1/code_of_conduct/>.
+
+## Scope
+
+The Code of Conduct applies to all project spaces and to anyone
+representing the project in public. This includes the GitHub repository,
+the issue tracker, pull-request discussions, project social-media
+accounts, and any official Spellguard event.
+
+## Reporting
+
+Suspected violations may be reported in confidence to
+**conduct@spellguard.ai**. Reports go to the project maintainers and are
+handled according to the [enforcement guidelines][cc21-enforcement]
+published with the Contributor Covenant.
+
+When reporting, please include:
+
+- A description of the incident, with links or screenshots if available.
+- The handles or names of the people involved.
+- Any additional context that would help us investigate.
+
+Reports are kept confidential. Reporters will not be named publicly
+without their consent.
+
+## Enforcement
+
+Maintainers are responsible for clarifying and enforcing the Code of
+Conduct, and will take fair, proportionate action in response to behavior
+they consider inappropriate, threatening, or harmful. Possible
+consequences include a private warning, a public warning, a temporary
+ban from project spaces, or a permanent ban — see the
+[Contributor Covenant enforcement ladder][cc21-enforcement] for the full
+framework we follow.
+
+## Attribution
+
+This Code of Conduct adopts the [Contributor Covenant 2.1][cc21], which
+is licensed under [CC BY 4.0][cc-by-4].
+
+[cc21]: https://www.contributor-covenant.org/version/2/1/code_of_conduct/
+[cc21-enforcement]: https://www.contributor-covenant.org/version/2/1/code_of_conduct/#enforcement-guidelines
+[cc-by-4]: https://creativecommons.org/licenses/by/4.0/

CONTRIBUTING.md

@@ -4,6 +4,12 @@ Thanks for your interest in contributing! This document covers how to set up
 a dev environment, what changes we accept, and how PRs flow back into the
 project.
 
+## Code of Conduct
+
+Participation in this project — issues, pull requests, discussions, and
+any other project channel — is governed by our
+[Code of Conduct](CODE_OF_CONDUCT.md). Please read it before contributing.
+
 ## Licensing
 
 Spellguard is released under the [Apache License 2.0](LICENSE). By