License flip to Apache 2.0 + 4-report council review fixes

License: replace proprietary 3-tier with Apache 2.0 across LICENSE, NOTICE,
CITATION.cff, pyproject.toml (license=Apache-2.0 + OSI classifier),
atome_llm/__init__.py, c_engine/upstream/atome.{c,h} SPDX. README rewritten
(Gumroad CTA removed; commercial offer reframed as integration + Secure Boot
Pack at atomelm.com). LICENSE-APACHE-2.0-V1-PRIOR-RELEASE.txt removed as
redundant.

Council fixes (4 independent reports in /workspace/Atome LM Research/):
  - torch.load(weights_only=True) in 6 scripts: demo, evaluate,
    export_to_atome, export_to_atome_packed, export_to_atome_p3,
    run_qemu_tinystories
  - ATOME_TOP_K read from checkpoint config (stats dict) instead of hard-coded
    default; regression test added in tests/test_export_format.py
  - C engine bounds checks: atome_predict_next rejects n_tokens<1 + NULL;
    atome_generate rejects prompt_len<1 / max_tokens<1 + NULL pointers
  - PAPER.md "600 K default" -> "60 K default" (typo)
  - atome.c:317 misleading "SSM state persists" comment rewritten to match
    reset-each-call reality
  - HONEST_RESULTS.md Bug A marked fixed in both Python and C
    (cites test_parity_multitoken.py; fix was already in atome.c:296-300)

Add .github/workflows/test.yml, CODE_OF_CONDUCT.md, CONTRIBUTING.md,
PROJECT_CONTENT.md for the public-repo posture.

Tests: 146 passed, 0 skipped (QEMU ARM parity included).

Author: Atome LM Team

.github/workflows/test.yml

@@ -0,0 +1,48 @@
+name: tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  pytest:
+    name: pytest (Python ${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+
+      - name: Install build essentials + qemu-system-arm
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            build-essential gcc-arm-none-eabi qemu-system-arm
+
+      - name: Install CPU-only PyTorch
+        run: |
+          python -m pip install --upgrade pip
+          pip install --index-url https://download.pytorch.org/whl/cpu \
+            "torch>=2.0"
+
+      - name: Install atome-llm + test deps
+        run: pip install -e ".[dev]"
+
+      - name: Environment check
+        run: python check_env.py
+
+      - name: pytest
+        run: pytest -q

.gitignore

@@ -23,8 +23,8 @@ c_engine/targets/*/firmware.elf
 c_engine/targets/*/firmware.map
 c_engine/targets/*/*.o
 
-# Distribution kit zips and source tarballs (ship via Gumroad, not git)
-atome-research-kit-v*.zip
+# Distribution kit zips and source tarballs
+atome-research-kit-*.zip
 atomelm-site.zip
 dist/*.tar.gz
 dist/*.zip

CITATION.cff

@@ -7,7 +7,7 @@ authors:
 url: "https://atomelm.com"
 version: "0.3.0"
 date-released: 2026-05-21
-license: LicenseRef-Atome-LM-Proprietary
+license: Apache-2.0
 keywords:
   - "language model"
   - "ternary"

CODE_OF_CONDUCT.md

@@ -0,0 +1,7 @@
+# Code of Conduct
+
+This project follows the [Contributor Covenant, version 2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).
+
+In short: be respectful, assume good faith, and focus discussion on the work. Everyone is welcome to contribute regardless of background or identity. Reports of unacceptable behavior can be sent privately to **hello@atomelm.com** and will be reviewed promptly and confidentially.
+
+The full text of the Contributor Covenant — including the complete enforcement guidelines — is at the link above and applies to this project in full.

CONTRIBUTING.md

@@ -0,0 +1,67 @@
+# Contributing to Atome LM
+
+Thanks for considering a contribution. This is a small, focused project — a tiny ternary language model + a C99 inference engine that talks to it bit-exactly. Read `PROJECT_CONTENT.md` first; it covers what you must not break.
+
+## Quick start
+
+```bash
+git clone https://github.com/atome-lm/atome-llm-kit
+cd atome-llm-kit
+./install.sh
+. .venv/bin/activate
+pytest -q        # expect: 146 passed (or 145 + 1 skipped without qemu-system-arm)
+```
+
+## Reporting bugs
+
+Open an issue on GitHub with:
+
+- what you ran (exact command)
+- what you expected
+- what happened (full error, not paraphrased)
+- your platform: OS, Python version, and `python -c "import torch; print(torch.__version__)"`
+
+If you hit a parity failure (Python forward ≠ C forward), please attach the failing seed and any checkpoint you trained — these are the highest-priority bugs.
+
+## Submitting a pull request
+
+1. Fork the repo and create a branch off `main`.
+2. Make your change.
+3. Run the full test suite — every PR must keep `pytest -q` green.
+4. If your change touches `atome_llm/core/`, `c_engine/upstream/`, or the export format, **specifically confirm** these tests still pass:
+   - `tests/test_parity_with_c.py` — single-forward Python ↔ C parity
+   - `tests/test_parity_multitoken.py` — multi-token Python ↔ C parity
+   - `tests/test_export_format.py` — binary format + header generation
+5. Open the PR. CI will rerun the suite on Python 3.10 / 3.11 / 3.12.
+
+## Scope of acceptable changes
+
+Welcome:
+
+- Bug fixes
+- New test coverage (especially fuzz cases on the C parser and edge inputs to `atome_predict_next` / `atome_generate`)
+- Performance improvements that preserve bit-exact parity
+- Documentation fixes and clarifications
+- New MCU target boards under `c_engine/targets/`, *as long as they don't change the upstream engine*
+- New baselines under `atome_llm/baselines/` for honest A/B comparison
+
+Out of scope, please don't open PRs for these:
+
+- Adding heap allocation, dynamic memory, or libc dependencies to `c_engine/upstream/`
+- Adding "shouldn't happen" fallbacks to deterministic code paths
+- Bundling new tokenizers (BPE / sentencepiece) — the byte tokenizer is a load-bearing design choice for MCU flash budget
+- Changes that break Python ↔ C parity, even if they improve a benchmark
+- New features that promote code from `c_engine/experiments/` into `c_engine/upstream/` without full parity + bounds-check coverage
+
+## Coding standards
+
+- Python: keep it simple, no helper layers, no decorators-for-style. Match the existing voice — small functions, no premature abstraction, comments only when the *why* is non-obvious.
+- C: C99 only, no GNU extensions, no libc beyond `<string.h>` / `<math.h>` / `<stdint.h>`. Static buffers sized by compile-time `ATOME_*` macros. Bounds-check all public API inputs.
+
+## Security
+
+If you find a security issue (anything that lets a malicious checkpoint or `.atome` blob compromise a host running the engine), please email **hello@atomelm.com** instead of filing a public issue. We'll coordinate disclosure.
+
+## License
+
+By submitting a contribution you agree it will be released under the Apache License 2.0 (the project license — see `LICENSE`).

HONEST_RESULTS.md

@@ -79,10 +79,12 @@ row (negligible % overhead at 944K).
 **Load-bearing but thin:**
 
 - All headline numbers are single-seed.
-- Multi-token C generation has a known SSM-state divergence bug
-  (Bug A) — fixed in Python; the C engine path needs a re-derive of
-  `atome_generate` to match. Single-forward Python↔C parity is
-  unaffected and remains bit-exact (`tests/test_parity_with_c.py`).
+- Multi-token C generation previously had an SSM-state divergence bug
+  (Bug A). Fixed in both Python and the C engine: `atome_predict_next`
+  resets the SSM hidden state and re-derives it from the full token
+  prefix on every call (`c_engine/upstream/atome.c`). Multi-token
+  Python↔C parity is covered by `tests/test_parity_multitoken.py`;
+  single-forward parity remains bit-exact via `tests/test_parity_with_c.py`.
 - RP2040 demo currently exceeds 264 KB SRAM at 944K — the MCU claim
   is regime-dependent and the launcher in this kit is testing whether
   power3 narrows the param budget enough to bring 944K back into scope