docs: add issue templates and security policy

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,64 @@
+---
+name: Bug Report
+about: Report a reproducible bug or unexpected behavior
+title: "[BUG] <short description>"
+labels: 'bug'
+
+---
+
+## Bug Description
+
+<!-- Clear and concise description of the bug. What did you expect? What happened? -->
+
+## Reproduction Steps
+
+```bash
+# Minimal command or script to reproduce
+```
+
+**Reproducibility:**
+
+- [ ] Always
+- [ ] Intermittently (~___% of the time)
+- [ ] Only once
+
+## Expected vs. Actual Behavior
+
+|              | Description                 |
+| ------------ | --------------------------- |
+| **Expected** | What you expected to happen |
+| **Actual**   | What actually happened      |
+
+## Outputs
+
+<details>
+<summary>Error / Stack Trace</summary>
+
+<!-- Attach or paste error / stack trace -->
+
+</details>
+
+<details>
+<summary>Log Files</summary>
+
+<!-- Attach or paste logs from the output directory -->
+
+</details>
+
+## System Information
+
+| Field                        | Value                                                    |
+| ---------------------------- | -------------------------------------------------------- |
+| **Model**                    | <!-- e.g. Cosmos3-Super-Reasoner -->                     |
+| **Integration**              | <!-- e.g. vLLM, SGLang, TensorRT-LLM, NIM, Diffusers --> |
+| **Environment**              | <!-- e.g. UV, Docker -->                                 |
+| **Hardware**                 | <!-- e.g. DGX H100 x8, single A100 80GB -->              |
+| **OS**                       | <!-- e.g. Ubuntu 22.04 / 24.04 -->                       |
+| **GPU Driver**               | <!-- e.g. 580.95.05 -->                                  |
+| **CUDA Version**             | <!-- e.g. 12.8.1 -->                                     |
+| **Python Version**           | <!-- e.g. 3.13.3 -->                                     |
+| **Package Version / Commit** | <!-- e.g. v1.2.3 or git SHA -->                          |
+
+## Additional Context
+
+<!-- Workarounds tried, related issues, etc. -->

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,29 @@
+---
+name: Feature Request
+about: Suggest a new feature or improvement
+title: "[FEAT] <short description>"
+labels: 'enhancement'
+
+---
+
+## Problem/Use Case
+
+<!-- What would you like to accomplish? -->
+
+## Proposed Feature
+
+<!-- What feature or improvement would you like to have? -->
+
+## Affected Area
+
+- [ ] Cookbooks / recipes
+- [ ] Evaluation / benchmarks
+- [ ] Inference integration (vLLM, SGLang, TensorRT-LLM, NIM, Diffusers)
+- [ ] Models
+- [ ] Finetune / distill
+- [ ] Docs / README
+- [ ] Other
+
+## Additional Context
+
+<!-- Papers, links, related issues -->

SECURITY.md

@@ -0,0 +1,19 @@
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+SPDX-License-Identifier: OpenMDW-1.1 -->
+
+# Report a Security Vulnerability
+
+To report a potential security vulnerability in any NVIDIA product, please use either:
+
+- This web form: [Security Vulnerability Submission Form](https://www.nvidia.com/en-us/support/submit-security-vulnerability/), or
+- Send email to: [NVIDIA PSIRT](mailto:psirt@nvidia.com)
+
+If reporting a potential vulnerability via email, please encrypt it using NVIDIA’s public PGP key ([see PGP Key page](https://www.nvidia.com/en-us/security/pgp-key/)) and include the following information:
+
+1. Product/Driver name and version/branch that contains the vulnerability
+2. Type of vulnerability (code execution, denial of service, buffer overflow, etc.)
+3. Instructions to reproduce the vulnerability
+4. Proof-of-concept or exploit code
+5. Potential impact of the vulnerability, including how an attacker could exploit the vulnerability
+
+See <https://www.nvidia.com/en-us/security/> for past NVIDIA Security Bulletins and Notices.