kolm  /  community

kolm community.

Where engineers compiling .kolm artifacts talk shop. Four surfaces below: a Discord for synchronous help, GitHub Discussions for durable threads, an HN launch post for the wide audience, and an X/Twitter thread for the short read. Direct line is founders@kolm.ai.

Contributor guide.

Five short answers to the questions every new contributor asks. The long form lives in CONTRIBUTING.md in the repo. Start with the docs and the RS-1 spec if you want to read before you write.

  • What can I work on? The repo has good-first-issue and help-wanted labels on GitHub. Backend adapters, compliance pack mappings, and CLI verbs are the easiest places to start.
  • How do I run the tests? npm test for the CLI and SDK, pytest for the Python runtime, ./scripts/e2e-flow.sh for the 9-stage end-to-end. Everything is gated by signed receipts.
  • What is the review bar? One signed-off review from a core maintainer. K-score regressions block merge. Em-dashes block merge (we use plain hyphens).
  • How do I sign my commits? git commit -S. Add your public key to your GitHub profile. The verify-on-PR Action checks the signature.
  • What if I want to write a research article? Open a Discussion first with the outline. We bias toward shipping fewer, longer pieces over many short ones. Templates in /research.

Code of conduct.

Contributor Covenant 2.1. The full text is in CODE_OF_CONDUCT.md in the repo. Short version: be the engineer you would want to debug a 3am incident with. Disagree on the technical substance, not the person. Report violations to founders@kolm.ai and they will be read within 24 hours.

One additional kolm-specific rule: do not paste customer PHI, customer credentials, or any private data into any community surface. The whole product is built around the premise that those things stay on your hardware. Honor that here too.

Direct line.

If the question is sensitive, embargoed, or you would rather not post in public: founders@kolm.ai. PGP key on /security. Response time is under one business day for most things, under one hour for security disclosures.