Tracking: legal (OSPS-LE) requirement decisions

[eddie-knight]

Centralized view of all open issues touching the legal (OSPS-LE) requirements, so duplicates and dependencies are visible in one place. Everything below hinges on the scope ruling in #403.

Blocking decision

• Consider dropping legal requirements #403 — Consider dropping legal requirements entirely (vs. splitting into profiles/tracks per @puerco). All items below are blocked on or obviated by this ruling.

Blocked on #403

• Proposal to remove OSPS-LE-01.01 #397 — Remove OSPS-LE-01.01 (contribution authorization / DCO)
• Proposal to merge OSPS-LE-02.0* #399 — Merge OSPS-LE-02.01 + OSPS-LE-02.02 (OSI/FSF license definition)
• Proposal to merge OSPS-LE-03.0* #400 — Merge OSPS-LE-03.01 + OSPS-LE-03.02 (LICENSE file locations)
• Proposal to add a packaging metdata license requirement #401 — Add machine-readable license metadata requirement (would be a new LE control; only relevant if LE stays)

Adjacent (not strictly legal, but raised in the same review and touches LE wording)

• "while active" felt confusing #398 — "while active" phrasing is confusing (affects OSPS-LE-02.0x/LE-03.0x among others; consensus already reached to drop the phrase and scope EOL projects out)