Prepare repo for open source

.github/pull_request_template.md

@@ -10,8 +10,15 @@
 
 - [ ] `npm run typecheck` passes
 - [ ] `npm test` passes
+- [ ] `npm audit --omit=dev --audit-level=moderate` passes, or residuals are explained
 - [ ] Added/updated tests for the change
 
+## Open-source readiness
+
+- [ ] Documentation updated where behavior, setup, deployment, or support expectations changed
+- [ ] No secrets, private URLs, proprietary captures, or generated artifacts were committed
+- [ ] Change follows the responsible-use policy
+
 ## Compiler determinism
 
 - [ ] No change to the compiler's deterministic clone semantics, **or** the change