SOFTWARE · ENGINEERING
Software & Engineering
Build, improve, test, and maintain software, infrastructure, developer tooling, and reproducible technical workflows.
Open contribution · controlled access
Contribute to XPScerpto.
Bring engineering, security research, governance and assurance, cryptography, documentation, or localization expertise into a contribution workflow where identity, capability, access, scope, verification, and audit remain separate.
- Only version-published opportunities
- Registration never grants access
- Every authoritative transition is auditable
Five contribution areas
Choose the kind of work you want to contribute.
These are public contribution areas, not permission classes. Runtime opportunities still use the existing governed operational track contract, and an organization affiliation remains separate from a person’s contribution discipline.
SECURITY RESEARCH
Security Research
Research vulnerabilities, strengthen threat models, support private disclosure, and produce remediation evidence.
GOVERNANCE · ASSURANCE · STANDARDS
Governance, Assurance & Standards
Contribute to governance, assurance cases, compliance and standards work, evidence rules, review models, and institutional trust boundaries.
RESEARCH · CRYPTOGRAPHY
Research & Cryptography
Advance cryptography, privacy, formal reasoning, reproducibility, datasets, and publication-quality research.
DOCUMENTATION · LOCALIZATION
Documentation, Translation & Localization
Create and improve technical documentation, terminology, translations, RTL presentation, learning material, and localized product content.
Live public projection
Published opportunities, without invented availability.
This view reads only the public allowlist. Eligibility is evaluated after authentication from your own verified capabilities, current agreements, availability, and policy state.
Reading published opportunity projections…
Could not load opportunities.
The opportunity service did not return a usable public projection. This is different from there being no published opportunities.
No published opportunities match this view.
The portal does not create sample openings. You can still register, build a verified capability profile, and return when an authorized publisher releases work.
A visible lifecycle
Every stage tells you the current state, next action, owner, and blocker.
The portal separates application decisions, capability verification, trials, access grants, provider state, submissions, CI evidence, review, revocation, and audit.
- 01
Discover
Review paths and public opportunities without exposing internal source scope or reviewer data.
- 02
Bind identity
Create or use an account, verify email, complete onboarding, profile, security, and agreements.
- 03
Apply and prove capability
Submit a versioned application and evidence through quarantine, scan, independent review, and expiry rules.
- 04
Trial, access, and execute
Accept a bounded task, receive provider-read-back access, work within scope, submit, verify, revise, and close.
Secure entry
Start with the minimum information required.
Create a new contributor account here. Existing contributors sign in through the dedicated authentication page so account entry and registration remain distinct.
- 1Create or authenticate an account
- 2Verify email and session assurance
- 3Create or read back one contributor profile
- 4Continue to resumable onboarding
An authenticated account is already available.
Continue to the contributor state already bound to this session.
Resume contributor portal
Checking policy
Reading the live registration policy before enabling account creation.
Already a contributor?
Sign in
Use the dedicated sign-in page to restore your contributor state without creating a duplicate account.
Sensitive commands use the authenticated session, CSRF protection, idempotency, policy versioning, and audit receipts. This page stores no credentials or eligibility data in browser storage.