fix(rhodibot): automated RSR compliance fixes

[hyperpolymath]

• Created missing
• Created missing

Summary

Changes

RSR Quality Checklist

Required

• Tests pass (just test or equivalent)
• Code is formatted (just fmt or equivalent)
• Linter is clean (no new warnings or errors)
• No banned language patterns (no TypeScript, no npm/bun, no Go/Python)
• No unsafe blocks without // SAFETY: comments
• No banned functions (believe_me, unsafeCoerce, Obj.magic, Admitted, sorry)
• SPDX license headers present on all new/modified source files
• No secrets, credentials, or .env files included

As Applicable

• .machine_readable/STATE.a2ml updated (if project state changed)
• .machine_readable/ECOSYSTEM.a2ml updated (if integrations changed)
• .machine_readable/META.a2ml updated (if architectural decisions changed)
• Documentation updated for user-facing changes
• TOPOLOGY.md updated (if architecture changed)
• CHANGELOG or release notes updated
• New dependencies reviewed for license compatibility (MPL-2.0 / MPL-2.0)
• ABI/FFI changes validated (src/interface/abi/ and src/interface/ffi/ consistent)

Testing

Screenshots

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 862e62b1-45c4-4572-9b1c-8597e9dc6dc2

📥 Commits

Reviewing files that changed from the base of the PR and between 509f364 and b489d0b.

📒 Files selected for processing (2)

• CONTRIBUTING.md
• SECURITY.md

---

📝 Summary

Summary by CodeRabbit

• Documentation
  • Added contribution guidelines covering the contribution process, licensing headers and pull requests.
  • Added a security policy describing vulnerability reporting, response timelines and safe-harbour provisions.

Walkthrough

Added contribution guidance and a security policy. The documents include licensing information, reporting contact details, response timelines, and safe-harbour terms.

Changes

Project policies

Layer / File(s)	Summary
Contribution and security policies CONTRIBUTING.md, SECURITY.md	Added contribution steps, an MPL-2.0 licence notice, vulnerability reporting details, response timelines, and a safe-harbour statement.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit finds the guide in place
Contribution steps set a steady pace
Security notes guard the gate
Clear timelines help responses wait
Safe paths now welcome every trace}

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud