Use Node.js 22 or newer and pnpm. Run pnpm check before submitting a change. New public operations require schemas, tests, documentation, and a safety classification. Architecture changes to transports, authentication, path policy, custom-code policy, or public schema semantics require an ADR.