there is a dead comment here suggesting to have the candidate sign an NDA so they can work on your codebase. while that may sometimes be necessary, if it is not already part of the process i would avoid adding it, and instead find a suitable FOSS project where the candidate can show their debugging skills instead.