Update notes for submitted changes

* Updating HACKING to disallow the use of locals()