Repository navigation
License inconsistency: Cargo.toml + package.json AGPL-3.0-or-later vs LICENSE MPL-2.0 #75
Description
Gap
Root LICENSE is Mozilla Public License 2.0 but both Cargo.toml and package.json declare AGPL-3.0-or-later. Same shape as verisimdb#82.
Specifics
Cargo.toml:20:license = "AGPL-3.0-or-later"package.json:20:"license": "AGPL-3.0-or-later"- Root
LICENSE: Mozilla Public License Version 2.0
Why this is filed as an issue rather than a PR
Estate memory flags panll as ask-first before sweeps (per prior owner revert of panll#60 in May 2026). License changes here need explicit owner direction even though the inconsistency is real and the fix is two lines.
Decision needed
Which way?
- Manifests →
MPL-2.0(align to LICENSE) — matches sole-owner default per estate policy - LICENSE →
AGPL-3.0-or-later(align to manifest) — only if this repo is intended as son-collaboration - Other
Related
- verisimdb#82, verisimdb#101 (precedent)
- Estate memory:
feedback_estate_license_policy_umbrella,feedback_panll_claude_md_leave_alone
🤖 Generated with Claude Code
Activity
hyperpolymath commentedon Jun 2, 2026
Status update post-hardening landed today (2026-06-02):
This auto-filed inconsistency is now flag-only — see umbrella
hypatia#416(now CLOSED). The 3-layer guard prevents any auto-PR:SC-010flipped toauto_fixable: false;license_finding_strategy/0caps severity to:warn/:review; Manual-Only policy header at the top oflib/rules/cicd_rules.exdispatch-runner.shrefuses anyrecipe_idorcategorymatchinglicense|spdx|pmpl|mpl-2|agpl|palimpsest; the 3 fix-scripts (fix-license-hygiene.sh/fix-license-file.sh/fix-missing-spdx.sh) exit 1 with refusal banners.claude/CLAUDE.mdtop-of-file 'License Policy — Manual Only' section + 5-way classificationResolution requires manual owner classification per the 5-way directive (
estate-license-policy-umbrella):Until classified manually by owner, this issue stays open as a tracked-but-not-auto-actionable record.
Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com
hyperpolymath commentedon Jun 2, 2026
FYI from the 2026-06-02 estate-wide PMPL→MPL sweep (standards#308): panll was explicitly EXCLUDED from the sweep per the always-on memory
feedback_panll_claude_md_leave_alone.md(owner reverted panll#60 on 2026-05-30; panll is owner-managed).The inconsistency this issue describes (Cargo.toml + package.json AGPL vs LICENSE MPL-2.0) is real and was observed during audit but NOT touched. Resolving it is owner-action only.
If the AGPL manifest fields are intentional (i.e., panll is category 3 son-shared), the LICENSE file should flip to AGPL-3.0-or-later. If the LICENSE is correct, the manifests should flip to MPL-2.0. The current discrepancy is owner-call.
chore(license): relicense panll metadata AGPL-3.0-or-later → MPL-2.0
hyperpolymath commentedon Sep 21, 2026
Resolved by #77 (merged 2026-06-13). Closing as completed.
Post-mortem state check 2026-09-21 confirms the decision the issue asked for already landed:
LICENSE: Mozilla Public License 2.0Cargo.toml:license = "MPL-2.0"(rootpackage.jsonno longer exists)The two earlier comments' context (flag-only status, exclusion from the 2026-06-02 sweep per
feedback_panll_claude_md_leave_alone) is preserved for history; no conflict with this closure — #77 was itself owner-reviewed.Remaining header/drift items were tracked in #78 and are closed there by the same audit.