chore(licence): MPL-2.0 for code, CC-BY-SA-4.0 for prose

.claude/CLAUDE.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # CLAUDE.md - AI Assistant Instructions

.claude/PROJECT.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Jaffascript - Claude Code Instructions
 
 This repository contains the Jaffascript project.

.devcontainer/Containerfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 #
 # Dev Container image for {{PROJECT_NAME}}

.devcontainer/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Dev Container Usage
 :author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>

.devcontainer/devcontainer.json

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) {{CURRENT_YEAR}} Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 //
 // Dev Container configuration for {{PROJECT_NAME}}

.github/GOVERNANCE.md

@@ -157,4 +157,4 @@ with the community before adoption, even though the BDFL retains final authority
 
 ---
 
-<sub>Copyright (c) {{CURRENT_YEAR}} hyperpolymath. Licensed under PMPL-1.0-or-later.</sub>
+<sub>Copyright (c) {{CURRENT_YEAR}} hyperpolymath. Licensed under CC-BY-SA-4.0.</sub>

.github/copilot-instructions.md

@@ -14,7 +14,7 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 ## License
 
-- SPDX: `PMPL-1.0-or-later` on all new files.
+- SPDX: `MPL-2.0` on code, `CC-BY-SA-4.0` on prose (`.adoc`, `.md`, docs), on all new files.
 - Never use AGPL-3.0.
 - Copyright: `Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>`
 

.github/pull_request_template.md

@@ -35,7 +35,7 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 - [ ] Documentation updated for user-facing changes
 - [ ] `TOPOLOGY.md` updated (if architecture changed)
 - [ ] `CHANGELOG` or release notes updated
-- [ ] New dependencies reviewed for license compatibility (PMPL-1.0-or-later / MPL-2.0)
+- [ ] New dependencies reviewed for license compatibility (code MPL-2.0 / prose CC-BY-SA-4.0)
 - [ ] ABI/FFI changes validated (`src/interface/abi/` and `src/interface/ffi/` consistent)
 
 ## Testing

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Primary CI/CD - GitLab is the source of truth
 
 stages:

.machine_readable/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Machine-readable metadata and configuration for RSR compliance.
 // See: https://github.com/hyperpolymath/rsr-template-repo
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>

.machine_readable/ai/.clinerules

@@ -5,8 +5,8 @@
 # STARTUP: Read 0-AI-MANIFEST.a2ml first, then .machine_readable/STATE.a2ml.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later.
-# Never AGPL-3.0. MPL-2.0 only as platform-required fallback.
+# Original code: MPL-2.0. Prose (.adoc, .md, docs): CC-BY-SA-4.0.
+# Never AGPL-3.0.
 # SPDX header required on every source file.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 

.machine_readable/ai/.cursorrules

@@ -5,8 +5,8 @@
 # Read 0-AI-MANIFEST.a2ml in the repo root FIRST for canonical file locations.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later (SPDX header required on every file).
-# Never use AGPL-3.0. Fallback to MPL-2.0 only when platform requires it.
+# Original code: MPL-2.0. Prose (.adoc, .md, docs): CC-BY-SA-4.0. SPDX header required on every file.
+# Never use AGPL-3.0.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 
 # STATE FILES

.machine_readable/ai/.windsurfrules

@@ -5,8 +5,8 @@
 # STARTUP: Read 0-AI-MANIFEST.a2ml first, then .machine_readable/STATE.a2ml.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later.
-# Never AGPL-3.0. MPL-2.0 only as platform-required fallback.
+# Original code: MPL-2.0. Prose (.adoc, .md, docs): CC-BY-SA-4.0.
+# Never AGPL-3.0.
 # SPDX header required on every source file.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 

.machine_readable/ai/PLACEHOLDERS.adoc

@@ -88,7 +88,7 @@ sed -i "s/{{CURRENT_DATE}}/$(date +%Y-%m-%d)/g" $(grep -rl '{{CURRENT_DATE}}' .)
 
 | Placeholder | Description | Example | Files |
 |---|---|---|---|
-| `{{LICENSE}}` | License name | `PMPL-1.0-or-later` | ABI-FFI-README.md |
+| `{{LICENSE}}` | License name | `MPL-2.0` | ABI-FFI-README.md |
 | `{{PROJECT_PURPOSE}}` | One-line project description | `FFI bridges between languages` | STATE.a2ml |
 
 ### AI Manifest

.machine_readable/compliance/reuse/dep5

@@ -3,52 +3,57 @@ Upstream-Name: {{PROJECT_NAME}}
 Upstream-Contact: {{AUTHOR}} <{{AUTHOR_EMAIL}}>
 Source: https://github.com/{{OWNER}}/{{REPO}}
 
-# Default: all files are PMPL-1.0-or-later
+# Default: code is MPL-2.0. Prose is CC-BY-SA-4.0 (last stanza; the last match wins).
 Files: *
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Configuration files that cannot carry headers
 Files: .editorconfig .gitignore .gitattributes .tool-versions .mailmap
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
-# Machine-readable state files
+# Machine-readable state files. The .a2ml headers stay PMPL until the deed migration; this stanza matches them.
 Files: .machine_readable/*.a2ml
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 License: PMPL-1.0-or-later
 
 # Bot directives
 Files: .machine_readable/bot_directives/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Contractiles
 Files: .machine_readable/contractiles/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # GitHub/CI configuration
 Files: .github/* .github/**/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Generated files
 Files: generated/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Lockfiles and auto-generated
 Files: *.lock Cargo.lock flake.lock
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Devcontainer config (JSON, no comments)
 Files: .devcontainer/*.json
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Git-cliff config
 Files: cliff.toml
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
+
+# Prose
+Files: *.adoc *.md
+Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
+License: CC-BY-SA-4.0

.machine_readable/contractiles/Justfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # RSR Standard Justfile Template
@@ -201,7 +201,7 @@
         -e "s|${LB}DATE${RB}|${CURRENT_DATE}|g"
         -e "s|${LB}SECURITY_EMAIL${RB}|${SECURITY_EMAIL}|g"
         -e "s|${LB}CONDUCT_EMAIL${RB}|${CONDUCT_EMAIL}|g"
-        -e "s|${LB}LICENSE${RB}|PMPL-1.0-or-later|g"
+        -e "s|${LB}LICENSE${RB}|MPL-2.0|g"
         -e "s|${LB}CONDUCT_TEAM${RB}|Code of Conduct Committee|g"
         -e "s|${LB}RESPONSE_TIME${RB}|48 hours|g"
         -e "s|${LB}MAIN_BRANCH${RB}|main|g"

.machine_readable/scripts/forge/git-cleanup.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: MPL-2.0
 # git-cleanup.sh — Repository hygiene script
 set -euo pipefail
 echo "Cleaning up merged branches..."

.pre-commit-config.yaml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Pre-commit hooks for hyperpolymath RSR repos.
 # Install: pip install pre-commit && pre-commit install
 # Run manually: pre-commit run --all-files

ARCHITECTURE.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Architecture
 
 === Overview

AUDIT.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Audit Gate
 Codex

CHANGELOG.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Changelog for jaffascript
 
 All changes are tracked in the main AffineScript repository. This is a

EXPLAINME.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2024-2026 Jonathan D.A. Jewell (hyperpolymath)
 = JaffaScript - Face Repository

GOVERNANCE.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Governance
 
 === Overview

Justfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # RSR Standard Justfile Template
@@ -201,7 +201,7 @@
         -e "s|${LB}DATE${RB}|${CURRENT_DATE}|g"
         -e "s|${LB}SECURITY_EMAIL${RB}|${SECURITY_EMAIL}|g"
         -e "s|${LB}CONDUCT_EMAIL${RB}|${CONDUCT_EMAIL}|g"
-        -e "s|${LB}LICENSE${RB}|PMPL-1.0-or-later|g"
+        -e "s|${LB}LICENSE${RB}|MPL-2.0|g"
         -e "s|${LB}CONDUCT_TEAM${RB}|Code of Conduct Committee|g"
         -e "s|${LB}RESPONSE_TIME${RB}|48 hours|g"
         -e "s|${LB}MAIN_BRANCH${RB}|main|g"

MAINTAINERS.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Maintainers
 :toc: preamble

PROOF-NEEDS.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Proof Requirements — \{\{PROJECT}}
 
 === Proof Tier

PROOF-STATUS.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Proof Status — \{\{PROJECT}}
 
 === Summary

QUICKSTART-MAINTAINER.adoc

@@ -107,7 +107,7 @@ Or via OPSM: `opsm update {{PACKAGE_NAME}}`
 
 == Security Notes
 
-* License: PMPL-1.0-or-later (Palimpsest License)
+* License: MPL-2.0 for code, CC-BY-SA-4.0 for prose
 * All dependencies SHA-pinned
 * `panic-attacker` scan results: link:INSTALL-SECURITY-REPORT.adoc[]
 * OpenSSF Scorecard: see badge in README

READINESS.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == rattlescript Component Readiness Assessment
 
 *Standard:*

README.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 https://opensource.org/licenses/MPL-2.0[image:https://img.shields.io/badge/License-MPL_2.0-blue.svg[License:
 MPL-2.0]]
 

ROADMAP.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2024-2026 Jonathan D.A. Jewell (hyperpolymath)
 = Jaffascript Roadmap

SECURITY.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Security Policy
 
 === Reporting a Vulnerability

TEMPLATE-STANDARDS-AUDIT.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Template Standards Audit
 Codex

TEST-NEEDS.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == TEST-NEEDS: rsr-template-repo
 
 === CRG Grade: C — ACHIEVED 2026-04-04
@@ -114,7 +115,7 @@ validation, benchmarks)
 documentation
 * *Author Attribution*: Jonathan D.A. Jewell
 6759885+hyperpolymath@users.noreply.github.com
-* *License*: PMPL-1.0-or-later on all new files
+* *License*: MPL-2.0 (code) or CC-BY-SA-4.0 (prose) on all new files
 * *Automation*: All scripts executable + working
 
 === FLAGGED ISSUES - ALL RESOLVED

TOPOLOGY.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: CC-BY-SA-4.0
 == Architecture Topology
 
 === System Overview

container/.gatekeeper.yaml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Svalinn gatekeeper policy for {{PROJECT_NAME}}
 #

container/Containerfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # {{PROJECT_NAME}} Container Image
 #
 # Multi-stage build template for Chainguard Wolfi base images.

container/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = {{PROJECT_NAME}} Container Templates
 :toc: left

container/compose.example.toml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Example selur-compose configuration — multi-service stack
 #

container/compose.toml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # {{PROJECT_NAME}} selur-compose configuration
 #

container/ct-build.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # {{PROJECT_NAME}} — Cerro Torre build, sign, and verify pipeline
 #

container/deploy.k9.ncl

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # deploy.k9.ncl — {{PROJECT_NAME}} deployment component (Hunt level)
 #
 # k9-svc deployment specification with full pedigree (L1-L5).

container/entrypoint.sh

@@ -1,5 +1,5 @@
 #!/bin/sh
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # {{PROJECT_NAME}} container entrypoint
 #
 # Handles signal propagation, startup logging, and health check

container/manifest.toml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Cerro Torre manifest for {{PROJECT_NAME}} .ctp bundle
 #

container/vordr.toml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Vordr runtime monitoring configuration for {{PROJECT_NAME}}
 #

contractile.just

@@ -2,7 +2,7 @@
 # Source directory: contractiles
 # Re-generate with: contractile gen-just --dir contractiles
 #
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 
 # === DUST (Recovery & Rollback) ===
 # Source: Dustfile.a2ml

docs/attribution/CITATION.cff

@@ -9,7 +9,7 @@ version: 0.1.0
 date-released: {{CURRENT_DATE}}
 url: "https://{{FORGE}}/{{OWNER}}/{{REPO}}"
 repository-code: "https://{{FORGE}}/{{OWNER}}/{{REPO}}"
-license: PMPL-1.0-or-later
+license: MPL-2.0
 keywords:
   - "rsr"
   - "formal-verification"