Backfill DCO + inbound license grant into CONTRIBUTING.md across existing tool repos

[TMHSDigital]

Per standards/licensing.md, every CONTRIBUTING.md in the ecosystem must carry the inbound DCO + license grant section (verbatim grant paragraph plus Signed-off-by: guidance). The scaffold now emits this in newly created repos as of #45, but the nine existing tool repos predate that change and do not carry the section.

Affected repos

Each needs a small PR adding the DCO section to CONTRIBUTING.md:

• TMHSDigital/Plaid-Developer-Tools
• TMHSDigital/Stripe-Developer-Tools
• TMHSDigital/Cursor-IDE-Developer-Tools
• TMHSDigital/Cloudflare-Developer-Tools
• TMHSDigital/Notion-Developer-Tools
• TMHSDigital/Home-Lab-Developer-Tools
• TMHSDigital/Hugging-Face-Developer-Tools
• TMHSDigital/Microsoft-Developer-Tools
• TMHSDigital/Blender-Developer-Tools

Canonical text

The exact CONTRIBUTING.md section to copy is now in scaffold/templates/CONTRIBUTING.md.j2 after #45. Tool repos can also reference standards/licensing.md for the rationale.

Related

• Closing scaffold drift: emitted output not aligned with current ecosystem patterns #41 added DCO to the scaffold. This issue tracks ecosystem backfill.
• Some tool repos already have separate DCO bot enforcement on PRs; the textual section in CONTRIBUTING.md is the missing piece.

Estimate: ~10 minutes per repo, batchable into one tool-repo session.

[TMHSDigital]

DCO and inbound license grant section backfilled across the tool repo fleet per standards/licensing.md.

Canary

• TMHSDigital/Home-Lab-Developer-Tools PR fix: release-doc-sync action checkout pollutes caller's working tree #20 (squash SHA c67e03b)

Parallel batch (7 PRs, all merged)

Repo	PR	Squash SHA	Release outcome
TMHSDigital/Blender-Developer-Tools	#1	6563afa	auto-release fired (v0.1.2)
TMHSDigital/Docker-Developer-Tools	#34	2838d19	merged silently (paths-ignore *.md)
TMHSDigital/Plaid-Developer-Tools	#11	535924c	merged silently (tag-triggered, no tag pushed)
TMHSDigital/Steam-Cursor-Plugin	#16	201e0d8	merged silently (paths-ignore *.md)
TMHSDigital/Mobile-App-Developer-Tools	#11	c82f33e	merged silently (tag-triggered, no tag pushed)
TMHSDigital/Monday-Cursor-Plugin	#18	f1ffa8e	merged silently (paths-ignore *.md)
TMHSDigital/steam-mcp	#7	1d8a877	merged silently (no release.yml in repo)

Skipped (filed as DTD#48)

• TMHSDigital/CFX-Developer-Tools (no CONTRIBUTING.md exists)
• TMHSDigital/Unity-Developer-Tools (no CONTRIBUTING.md exists)

DTD#48 tracks creating CONTRIBUTING.md in those two repos with the DCO section included from the start.

Audit trail and follow-ups

DTD#47 separately tracks the systemic paths-ignore inconsistency that caused 6 of the 8 backfill commits to land without firing release-doc-sync. Once DTD#47 lands, the next non-md change in each silent repo will trigger release-doc-sync and the CHANGELOG will pick up the previous DCO commit by reference. In the meantime, the squash-merge SHA per repo is the durable audit record.

Compliance status

Of 10 tool repos, 8 are now compliant with standards/licensing.md (CONTRIBUTING.md contains the verbatim DCO grant + Signed-off-by guidance). 2 remain non-compliant pending DTD#48 (the file does not exist).