Repository navigation
licence: normalise to MPL-2.0 + REUSE compliance + fail-closed reuse-lint gate - #54
Merged
Merged
Conversation
…gate - Flip 2 remaining AGPL-3.0-or-later SPDX headers → MPL-2.0 (parse-gate.yml, proof-corpus.yml + all AGPL-stamped source files carried over from prior partial normalise commit) - Fix src/core/Cargo.toml and src/interface/Cargo.toml license fields AGPL-3.0-or-later → MPL-2.0 - Root LICENSE now contains canonical MPL-2.0 text (GitHub Licensee shows MPL-2.0) - Add LICENSES/MPL-2.0.txt and LICENSES/CC-BY-SA-4.0.txt - Add REUSE.toml (v1) covering all files without inline headers: docs/** + *.adoc + *.md + *.bib + *.tex → CC-BY-SA-4.0; configs, scripts, AI manifests, lockfiles, dotfiles, etc. → MPL-2.0 - Add .github/workflows/reuse.yml: fail-closed reuse lint CI gate (push + pull_request, ubuntu-latest, pip install reuse, reuse lint) - reuse lint: PASS (448/448 files covered, 0 unused licences) - rg residual AGPL/PMPL: 0 matches outside LICENSES/ https://claude.ai/code/session_01W9Voe3JceP66Bna9FT4jME
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
hyperpolymath
marked this pull request as ready for review
June 5, 2026 14:32
hyperpolymath
enabled auto-merge (squash)
June 5, 2026 14:33
hyperpolymath
disabled auto-merge
June 5, 2026 14:54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
SPDX-License-Identifier: AGPL-3.0-or-laterheaders flipped toMPL-2.0(parse-gate.yml, proof-corpus.yml, all source files in the parse/attest/recompute-wasm trusted crates and surrounding interface layer)src/core/Cargo.tomlandsrc/interface/Cargo.tomlhadlicense = "AGPL-3.0-or-later"→license = "MPL-2.0"(the 3 interface crates parse/attest/recompute-wasm were already MPL-2.0 in their standalone Cargo.toml files)LICENSE: now contains canonical MPL-2.0 text; GitHub Licensee will show MPL-2.0LICENSES/populated:MPL-2.0.txtandCC-BY-SA-4.0.txtadded viareuse downloadREUSE.tomladded (version = 1): covers all 311+ files that lacked inline copyright headers —docs/**,**/*.adoc,**/*.md,**/*.bib,**/*.tex, legal exhibits → CC-BY-SA-4.0.a2ml), lockfiles, YAML/TOML/JSON, dotfiles,.github/**,.machine_readable/**,container/**,src/**,verification/**→ MPL-2.0precedence = "aggregate"throughout: supplements inline SPDX-License-Identifier tags with copyright notices where they were missing.github/workflows/reuse.yml: fail-closed REUSE compliance gate — runs on every push and pull_request,pip install reuse+reuse lint; blocks merge if any file is uncoveredVerification
reuse lint= PASS — 448/448 files covered, 0 unused licences, 0 bad licencesrg 'AGPL-3.0-or-later|PMPL-1.0-or-later' .(excludingLICENSES/) = 0 matcheshttps://claude.ai/code/session_01W9Voe3JceP66Bna9FT4jME
Generated by Claude Code