Licence policy: additive clarifications (007, no-automation, variant cleanup) — Rules 1–3 unchanged#138
Merged
Conversation
Owner decision 2026-05-18 (option A), taken with the prior lawyer-backed position in view: supersede 'PMPL-declared + MPL-2.0 invisible fallback' with 'MPL-2.0 declared default; PMPL = future overlay only'. - LICENCE-POLICY.adoc rewritten as the constitution; old model recorded as explicitly superseded (history kept, not erased). - Son exception generalised to 'son owns/admins -> AGPL-3.0-or-later' with IDApTIK + ASS as named instances (reconciles broad session rule with the doc's specific instances). - 007 reframed: full commercial dual-use, hazardous to declare -> out of scope entirely (never scan/label/sweep). - Rules 5/6 keep third-party-never-relicense + no-automated-edits. - .machine_readable/licensing-policy.toml: tool-readable rules (NOT a REUSE per-file map — that would assert a contradiction with still- legacy PMPL headers; encodes rules, not per-file claims). Transparency: this file's OWN SPDX header flipped PMPL->MPL-2.0. That is a single owner-directed hand edit of the constitution doc itself (authoring, not an automated sweep) — the policy doc must not carry the header it supersedes. Objectable if the owner disagrees. Refs PR rsr-template-repo#62; LICENSING-DEBT-AND-REMEDIATION. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Corrects this branch's earlier (mistaken) supersession. A read-only estate audit confirmed the original three Rules are correct: PMPL-1.0-or-later is the disciplined estate standard, and PMPL = Palimpsest-MPL v1.0 (incorporates MPL-2.0 by reference with the Rule 2 MPL-2.0 fallback). The prior policy was internally coherent. Net diff vs main is now purely ADDITIVE — Rules 1-3 verbatim, plus: - Addendum A1: 007 out of scope (full commercial dual-use, hazardous to declare) - A2: no automated licence edits (manual, owner-only) - A3: variant normalisation (PMPL-1.0 / -or-later-or-later -> PMPL-1.0-or-later) is the only debt, manual - A4: son AGPL vs PAGPL-1.0-or-later flagged as OPEN owner question (not asserted) - Enforcement: reference the (reframed) spdx-policy-guard - .machine_readable/licensing-policy.toml rewritten to the TRUE policy Pairs with rsr-template-repo#63 (revert of the mistaken default flip). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Re-scoped. An earlier push on this branch wrongly superseded the policy. A read-only estate audit then established the original three Rules are correct:
PMPL-1.0-or-lateris the disciplined estate standard, and PMPL = Palimpsest-MPL v1.0 which incorporates MPL-2.0 by reference with the Rule 2 MPL-2.0 fallback. The model was always coherent.This PR is now purely additive — Rules 1–3 verbatim from
main, plus an addendum:007out of scope (full commercial dual-use, hazardous to declare)PMPL-1.0/PMPL-1.0-or-later-or-later→PMPL-1.0-or-laterAGPL-3.0-or-latervs canonicalPAGPL-1.0-or-later— flagged as an OPEN owner question, not assertedspdx-policy-guard.machine_readable/licensing-policy.tomlrewritten to the TRUE policyDiff vs main: +99, 0 deletions. Pairs with rsr-template-repo#63. Merge is your call.