OIC-GC-008 — Licensing and dependency compatibility review

[veraxis-protocol]

Owner

Arkadiy Miteiko / Veraxis coordinates the review; final compatibility conclusions require an appropriately qualified independent licensing reviewer or counsel.

Required inputs

• Current dependency lockfiles, SBOM, LICENSES.json, dependency inventory, and upstream license texts/notices.
• ZTL and VEIP dossier licensing data.
• Corpus rights/provenance findings from OIC-GC-005.

Required outputs

• Dependency-by-dependency compatibility matrix.
• Missing notice, attribution, source-offer, redistribution, patent, and copyleft obligations.
• Risk/uncertainty register and owner-ready recommendations.

Acceptance criteria

• Every direct and transitive dependency is mapped to a pinned version and reviewed license evidence.
• Unknown, ambiguous, or conflicting terms remain blocked and are escalated.
• Repository license publication is excluded unless separately authorized by the owner after qualified review.
• Findings do not claim legal compliance.

Explicit non-goals

• No license publication.
• No legal-compliance claim or substitution for legal advice.
• No semantic implementation or gate opening.

Dependencies

• Requires evidence from OIC-GC-004 and OIC-GC-005 where applicable.
• Feeds OIC-GC-007.
• Blocked pending qualified independent review.

Current gate impact

Provides licensing-risk evidence only. It cannot open the semantic implementation gate.

[veraxis-protocol]

RECONCILIATION STATUS — 2026-08-17

Historical state:

• OIC-GC-008 was opened as a licensing and dependency compatibility review.

Successor evidence located (identified, not adjudicated):

• Software dependency inventory and SBOM: DEPENDENCIES.md, sbom/, with the sbom CI context passing on main (29daa374b7e5cdc30ca7788310fbabb85f19912b).
• VEIP: PR veip: add dependency dossier preflight inventory #14 dependency preflight — explicitly INCOMPLETE, NOT AN INTERFACE FREEZE.
• ZTL: PR ztl: supply provisional interface-freeze evidence #18 evidence, including RELEASE-PROVENANCE-v0.1.md. Signing attests publication origin only; it makes no licensing statement.
• Corpus/source rights: PR corpus/canada: rights-resolution dossier for the ten blocked sources (v0.1) #21 Canada rights-resolution dossier — all ten sources BLOCKED_PENDING_CLEARANCE, no publisher permission received, no counsel clearance established. PR research: add Morocco official-source preflight #22 (draft, Morocco) is PROVISIONAL_UNRECONCILED.

Current status:

• OPEN — EXTERNAL / QUALIFIED-REVIEW DEPENDENCY.

The strands, kept separate — resolving one resolves none of the others:

1. Software dependency licensing — inventory exists; compatibility not adjudicated.
2. ZTL licensing — upstream terms and their compatibility with this repositorys use and redistribution: not established.
3. VEIP licensing — not established; the dependency dossier is incomplete by its own statement.
4. Corpus / source rights — unresolved; ten Canada sources blocked pending clearance.
5. Public redistribution rights — separate from use rights and not established for any source.
6. Publisher permissions — none received.
7. Repository license status — to be confirmed against the intended distribution posture.

Remaining closure conditions:

• A qualified reviewer — counsel or equivalent — must render the compatibility and redistribution determinations. That determination is explicitly required and absent.
• Publisher permissions or a documented rights basis for each mission-selected source.
• Coordination with OIC-GC-005 — Procurement preflight corpus selection and provenance #9 (corpus provenance) and OIC-GC-004 — VEIP dependency and interface dossier #8 (VEIP boundary); this issue cannot close ahead of either.

Claim ceiling — stated plainly:

• No legal-compliance conclusion is made here, and none may be inferred from this comment.
• Licenses are not established as compatible. Dependencies installing cleanly and CI passing are facts about builds, not about rights: a green sbom job records an inventory, it does not adjudicate a licence.
• Nothing here establishes redistribution rights, publisher permission, or counsel clearance.