diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
new file mode 100644
index 0000000..87ccc33
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -0,0 +1,89 @@
+name: Bug report
+description: Report reproducible incorrect behavior in opencode2-mobile
+title: "[Bug]: "
+labels:
+  - bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not include credentials, pairing codes, push tokens, server addresses, prompts, file contents, session IDs, or unredacted logs. Report security issues through private vulnerability reporting instead.
+
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What happened, and what did you expect instead?
+    validations:
+      required: true
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform
+      options:
+        - iOS physical device
+        - iOS Simulator
+        - Android physical device
+        - Android Emulator
+    validations:
+      required: true
+
+  - type: dropdown
+    id: installation
+    attributes:
+      label: Installation
+      options:
+        - Expo Go
+        - Development build
+        - EAS preview build
+        - Local release build
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: app-version
+    attributes:
+      label: App version or commit
+      placeholder: "0.1.2 or commit SHA"
+    validations:
+      required: true
+
+  - type: input
+    id: opencode-version
+    attributes:
+      label: OpenCode version
+      description: The tested baseline is beta 18050. Do not include a server address.
+      placeholder: "0.0.0-beta-18050"
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction steps
+      description: Use sanitized names and content.
+      placeholder: |
+        1. Open ...
+        2. Select ...
+        3. Observe ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: diagnostics
+    attributes:
+      label: Redacted diagnostics
+      description: Include only the minimum error text or diagnostic counters needed to reproduce the issue.
+      render: text
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Safety checks
+      options:
+        - label: I removed credentials, addresses, identifiers, user content, and private paths.
+          required: true
+        - label: I searched existing issues for this problem.
+          required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 0000000..178b2f0
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability
+    url: https://github.com/omnicus/opencode2-mobile/security/advisories/new
+    about: Report credential exposure, authentication bypasses, unsafe routing, or data leakage privately.
+  - name: OpenCode upstream
+    url: https://github.com/anomalyco/opencode/issues
+    about: Report issues in the OpenCode server, CLI, or official client upstream.
diff --git a/.github/ISSUE_TEMPLATE/feature-request.yml b/.github/ISSUE_TEMPLATE/feature-request.yml
new file mode 100644
index 0000000..2c74a46
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature-request.yml
@@ -0,0 +1,48 @@
+name: Feature request
+description: Propose a focused addition or behavior change
+title: "[Feature]: "
+labels:
+  - enhancement
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Check `TODO.md` and `docs/SPEC.md` before proposing roadmap work. Do not include private deployment details or user content.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user problem should this solve?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe the smallest useful behavior, including relevant iOS and Android differences.
+    validations:
+      required: true
+
+  - type: textarea
+    id: contract
+    attributes:
+      label: OpenCode contract
+      description: Name the documented V2 endpoint or event this relies on, if applicable.
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Explain current workarounds or smaller alternatives.
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I checked the existing roadmap and issues.
+          required: true
+        - label: This request does not depend on undocumented OpenCode behavior without calling that out.
+          required: true
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 0000000..1aecbda
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,12 @@
+## Summary
+
+Describe the user-visible or contract-level change.
+
+## Verification
+
+- [ ] `pnpm check`
+- [ ] `pnpm native:doctor`
+- [ ] Tests cover the changed behavior.
+- [ ] Platform behavior is verified on the affected targets, or the gap is documented.
+- [ ] No credentials, addresses, identifiers, user content, private paths, or deployment files are included.
+- [ ] Documentation and `TODO.md` reflect the resulting behavior.