fix: provenance correction — JSS = JavaScriptSolidServer, not Community Solid Server

v0.3.0-alpha.1 mis-attributed the upstream JSS reference to the
wrong Solid server project (wrong repository, wrong licence, wrong
author). The actual reference implementation is JavaScriptSolidServer
(JSS), at github.com/JavaScriptSolidServer/JavaScriptSolidServer,
maintained by the JavaScriptSolidServer contributors and licensed
AGPL-3.0-only.

Corrections (documentation only):
- README.md: prominent correction notice; Provenance section
  rewritten; Related projects entry replaced; Licence section
  clarified re: AGPL-3.0 for JSS; closing attribution fixed.
- NOTICE: upstream lineage §3 rewritten; new "Licence relationship
  to JavaScriptSolidServer (JSS)" section with explicit
  non-derivative-work claims and rationale for MIT/Apache-2.0 dual
  licensing despite JSS being AGPL.
- CHANGELOG.md: new [0.3.0-alpha.2] entry; alpha.1 credit line fixed.
- GAP-ANALYSIS.md: title, intro paragraph, and upstream URL corrected;
  non-derivative-work stance added.
- CONTRIBUTING.md: parity-checklist prose fixed.
- PARITY-CHECKLIST.md: intro prose fixed.
- Cargo.toml: version bumped to 0.3.0-alpha.2.
- tests/interop_jss.rs, tests/wac_inheritance.rs: module docstrings
  corrected; WAC corpus adds independent-authorship assertion.

Zero source or test behaviour changes between alpha.1 and alpha.2.
Upgrade is safe with no API or behavioural deltas.

Co-Authored-By: claude-flow <ruv@ruv.net>

Author: jjohare

CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to this crate are recorded here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the crate
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0-alpha.2] — 2026-04-20
+
+### Fixed
+- **Provenance correction (documentation only).** The `0.3.0-alpha.1`
+  release mis-attributed the upstream JSS reference to the wrong
+  Solid server project (wrong repository, wrong licence, wrong
+  author). The actual reference implementation is
+  **JavaScriptSolidServer** (JSS), at
+  <https://github.com/JavaScriptSolidServer/JavaScriptSolidServer>,
+  maintained by the JavaScriptSolidServer contributors and licensed
+  **AGPL-3.0-only**. No parity code or behaviour was affected — only
+  the documentation narrative was wrong.
+- `README.md`, `NOTICE`, `GAP-ANALYSIS.md`, `CONTRIBUTING.md`,
+  `PARITY-CHECKLIST.md`, `Cargo.toml` corrected across every mention.
+- `NOTICE` now carries an explicit "Licence relationship to
+  JavaScriptSolidServer (JSS)" section documenting that solid-pod-rs
+  is NOT a derivative work of JSS's JavaScript source, and that
+  MIT/Apache-2.0 dual licensing is deliberate despite JSS being AGPL.
+- The `references/` directory pointer now reads
+  `javascript-solid-server/` across all prose; the vendored symlink
+  has always resolved to the real JSS repo.
+
+### Notes
+- Zero code behaviour changes in this release.
+- Consumers who already installed `v0.3.0-alpha.1` can upgrade to
+  `v0.3.0-alpha.2` safely with no API or behavioural deltas.
+
 ## [0.3.0-alpha.1] — 2026-04-20
 
 ### Changed
@@ -21,14 +48,14 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ### Added
 - `GAP-ANALYSIS.md` — exhaustive feature-by-feature comparison with
-  the Community Solid Server (JSS) reference implementation, with
+  the JavaScriptSolidServer (JSS) reference implementation, with
   deferred-to milestones for every gap.
 - GitHub Actions CI workflow (`.github/workflows/ci.yml`) running
   `cargo check`, `cargo test` (default + all-features), `cargo clippy`,
   and `cargo fmt --check` on stable Rust.
 - Standalone `NOTICE` with the full provenance chain: VisionClaw →
   community-forum-rs pod-worker → TypeScript pod-api, with credit to
-  Melvin Pirera and the Community Solid Server contributors.
+  the JavaScriptSolidServer contributors.
 
 ### Notes
 - No source behaviour has changed between `0.2.0-alpha.1` (the last
@@ -131,6 +158,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   signatures and in-memory stubs. Full Solid Notifications Protocol
   (WebSocket, Webhook) is the Phase 2 deliverable.
 
+[0.3.0-alpha.2]: https://github.com/dreamlab-ai/solid-pod-rs/releases/tag/v0.3.0-alpha.2
 [0.3.0-alpha.1]: https://github.com/dreamlab-ai/solid-pod-rs/releases/tag/v0.3.0-alpha.1
 [0.2.0-alpha.1]: https://github.com/DreamLab-AI/VisionClaw
 [0.1.0-alpha.1]: https://github.com/DreamLab-AI/VisionClaw

CONTRIBUTING.md

@@ -60,7 +60,7 @@ Backends should:
 
 ## Parity checklist
 
-Any feature port from the Community Solid Server (JSS) reference
+Any feature port from the JavaScriptSolidServer (JSS) reference
 implementation must update `PARITY-CHECKLIST.md` to reflect its new
 status. The checklist is the contract between this crate and the
 wider Solid ecosystem — it is not a formality.

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "solid-pod-rs"
-version = "0.3.0-alpha.1"
+version = "0.3.0-alpha.2"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"

GAP-ANALYSIS.md

@@ -1,16 +1,18 @@
-# Gap Analysis — solid-pod-rs vs Community Solid Server (JSS)
+# Gap Analysis — solid-pod-rs vs JavaScriptSolidServer (JSS)
 
 This document enumerates, feature by feature, where solid-pod-rs
-currently stands relative to the **Community Solid Server** (JSS, also
-known as CSS) reference implementation. It also records the deferral
-rationale for every gap and the target milestone at which each will
-close.
-
-> JSS is the de facto Solid Protocol reference. It has been maintained
-> since 2020 by the Solid project and implements a superset of the
-> specifications. solid-pod-rs aims for behavioural parity on the
+currently stands relative to the **JavaScriptSolidServer** (JSS)
+reference implementation. It also records the deferral rationale for
+every gap and the target milestone at which each will close.
+
+> JSS is a JavaScript Solid Protocol reference implementation
+> (AGPL-3.0-only) maintained by the JavaScriptSolidServer
+> contributors. solid-pod-rs aims for behavioural parity on the
 > protocol surface while deliberately narrowing scope on operator
 > and UI concerns that are better served by orthogonal Rust crates.
+> solid-pod-rs is NOT a derivative work of JSS's JavaScript source;
+> see `NOTICE` §"Licence relationship to JavaScriptSolidServer (JSS)"
+> for the full independence claims.
 
 The authoritative spec tracker is
 [`PARITY-CHECKLIST.md`](./PARITY-CHECKLIST.md). This document is the
@@ -450,7 +452,7 @@ on the shared protocol surface.
 ## References
 
 - Parity checklist: [`PARITY-CHECKLIST.md`](./PARITY-CHECKLIST.md)
-- JSS: <https://github.com/CommunitySolidServer/CommunitySolidServer>
+- JSS: <https://github.com/JavaScriptSolidServer/JavaScriptSolidServer>
 - Solid Protocol 0.11: <https://solidproject.org/TR/protocol>
 - WAC: <https://solidproject.org/TR/wac>
 - Solid-OIDC 0.1: <https://solidproject.org/TR/oidc>

NOTICE

@@ -36,16 +36,15 @@ Upstream lineage
    team as a Rust port of their earlier TypeScript `workers/pod-api/`.
 
 3. The project architecture, LDP surface area, and WAC evaluation
-   model draw heavily on the JavaScript Community Solid Server ("JSS"
-   or "CSS") reference implementation by Melvin Pirera, Ruben Taelman,
-   Joachim Van Herwegen, and contributors, licensed MIT:
+   model draw heavily on JavaScriptSolidServer ("JSS"), maintained by
+   the JavaScriptSolidServer contributors, licensed AGPL-3.0-only:
 
-       https://github.com/CommunitySolidServer/CommunitySolidServer
+       https://github.com/JavaScriptSolidServer/JavaScriptSolidServer
 
    JSS served as the canonical parity reference during porting. We
-   gratefully acknowledge the CSS team's work in making the Solid
-   Protocol concretely buildable in JavaScript, which made this Rust
-   port tractable.
+   gratefully acknowledge the JavaScriptSolidServer contributors'
+   work in making the Solid Protocol concretely buildable in
+   JavaScript, which made this Rust port tractable.
 
 4. The Solid Protocol specifications (LDP, WAC, Solid-OIDC, Solid
    Notifications, WebID) are authored by the W3C Solid Community Group
@@ -74,10 +73,36 @@ Licensing
 ---------
 
 Dual-licensed under MIT OR Apache-2.0, at your option. This choice
-matches Rust ecosystem convention and is compatible with the MIT
-licence of the Community Solid Server (JSS) reference.
+matches Rust ecosystem convention.
 
 See `LICENSE-MIT` and `LICENSE-APACHE` for the full texts.
 
 Contributions unless explicitly marked otherwise are accepted under
 the same dual licence per the Apache 2.0 contribution clause.
+
+Licence relationship to JavaScriptSolidServer (JSS)
+---------------------------------------------------
+
+JavaScriptSolidServer (https://github.com/JavaScriptSolidServer/JavaScriptSolidServer)
+is licensed AGPL-3.0-only. This Rust crate is NOT a derivative work of JSS's
+JavaScript source code. Specifically:
+
+- The Rust implementation originates from community-forum-rs/crates/pod-worker
+  (written in Rust from scratch, inspired by but not copied from any Solid
+  server implementation).
+- We read JSS's source as a reference-only resource to understand Solid
+  Protocol 0.11 + WAC + LDP + Solid-OIDC + Solid Notifications behaviour.
+- No JSS JavaScript was translated, transliterated, or machine-ported into
+  this crate.
+- The WAC inheritance test corpus (`tests/wac_inheritance.rs`) was
+  independently authored to exercise equivalent edge cases documented by
+  the Solid Protocol. Where test SCENARIOS resemble JSS's own tests,
+  that is because the Solid Protocol admits a finite number of edge cases,
+  not because test code was copied.
+- The JSS-interop fixture tests (`tests/interop_jss.rs`) test against the
+  Solid Protocol via independently-authored request/response fixtures;
+  they do not embed JSS code.
+
+On that basis this crate is licensed MIT OR Apache-2.0 dual. Consumers who
+wish to bundle JSS and this crate together should verify their own
+compliance with AGPL-3.0's network-service clause for JSS.

PARITY-CHECKLIST.md

@@ -1,8 +1,9 @@
 # JSS ↔ solid-pod-rs Parity Checklist
 
-Tracks every Solid protocol feature implemented by the JavaScript
-Solid Server (JSS, vendored at `references/community-solid-server/`)
-against solid-pod-rs. Updated every time a feature ships or regresses.
+Tracks every Solid protocol feature implemented by
+JavaScriptSolidServer (JSS, vendored at
+`references/javascript-solid-server/`) against solid-pod-rs. Updated
+every time a feature ships or regresses.
 
 ## Status key
 

README.md

@@ -12,6 +12,40 @@
 
 ---
 
+## v0.3.0-alpha.1 → v0.3.0-alpha.2 Correction Notice
+
+The initial `v0.3.0-alpha.1` release mis-attributed the upstream JSS
+reference to the wrong Solid server project (wrong repository, wrong
+licence, wrong author). The actual reference implementation is:
+
+- **JavaScriptSolidServer** (JSS)
+- Repo: <https://github.com/JavaScriptSolidServer/JavaScriptSolidServer>
+- Licence: **AGPL-3.0-only**
+- Maintained by the JavaScriptSolidServer contributors
+
+solid-pod-rs `v0.3.0-alpha.2` corrects the documentation narrative
+(README, NOTICE, CHANGELOG, CONTRIBUTING, GAP-ANALYSIS,
+PARITY-CHECKLIST, test docstrings) to name the real upstream. No
+source code or test behaviour changed between `alpha.1` and
+`alpha.2`; the parity tests and fixtures were always exercising the
+Solid Protocol itself, not any specific implementation's internals.
+The `references/javascript-solid-server/` symlink has always pointed
+at the real JSS repository.
+
+solid-pod-rs is NOT a derivative work of JSS's JavaScript source.
+The Rust implementation originates from
+`community-forum-rs/crates/pod-worker` (written in Rust from
+scratch); JSS is read as a reference-only resource for Solid
+Protocol behaviour. See [`NOTICE`](./NOTICE) §"Licence relationship
+to JavaScriptSolidServer (JSS)" for the full independence claims
+and the rationale for MIT/Apache-2.0 dual licensing despite JSS
+being AGPL.
+
+Upgrade from `alpha.1` → `alpha.2` is safe with zero API or
+behavioural deltas.
+
+---
+
 ## What is solid-pod-rs
 
 solid-pod-rs is a **Rust implementation of the server side of the
@@ -59,18 +93,21 @@ all of them.
    VisionClaw port. The licensed work is re-released under
    MIT OR Apache-2.0 by the copyright holders.
 
-3. **Design follows the Community Solid Server (JSS / CSS)** — the
+3. **Design follows JavaScriptSolidServer (JSS)** — the
    reference JavaScript implementation at
-   [github.com/CommunitySolidServer/CommunitySolidServer](https://github.com/CommunitySolidServer/CommunitySolidServer),
-   licensed MIT, authored and maintained by **Melvin Pirera**, Ruben
-   Taelman, Joachim Van Herwegen, and contributors. JSS served as
-   the canonical parity reference — every feature of solid-pod-rs
-   was benchmarked against JSS's observable HTTP behaviour, and
-   `tests/interop_jss.rs` contains a 22-test fixture corpus derived
-   directly from JSS's emitted headers and status codes. We
-   gratefully acknowledge Melvin Pirera and the wider CSS
-   community — without their JavaScript reference, a Rust port of
-   this scope would have taken years instead of two sprints.
+   [github.com/JavaScriptSolidServer/JavaScriptSolidServer](https://github.com/JavaScriptSolidServer/JavaScriptSolidServer),
+   licensed AGPL-3.0-only, maintained by the JavaScriptSolidServer
+   contributors. JSS served as the canonical parity reference —
+   every feature of solid-pod-rs was benchmarked against JSS's
+   observable HTTP behaviour, and `tests/interop_jss.rs` contains a
+   22-test fixture corpus of independently-authored request /
+   response fixtures exercising the Solid Protocol. We gratefully
+   acknowledge the JavaScriptSolidServer contributors — without
+   their JavaScript reference, a Rust port of this scope would have
+   taken years instead of two sprints. solid-pod-rs is NOT a
+   derivative work of JSS's JavaScript source; see [`NOTICE`](./NOTICE)
+   §"Licence relationship to JavaScriptSolidServer (JSS)" for the
+   full independence claims.
 
 4. **Protocol authorship** — the Solid Protocol, WAC, Solid-OIDC,
    and Solid Notifications are authored by the W3C Solid Community
@@ -654,9 +691,10 @@ Related registries and schemas:
 
 Reference implementations:
 
-- **Community Solid Server (JSS / CSS)** — the canonical JS/TS
+- **JavaScriptSolidServer (JSS)** — the canonical JavaScript Solid
   reference that solid-pod-rs benchmarks against —
-  <https://github.com/CommunitySolidServer/CommunitySolidServer>
+  <https://github.com/JavaScriptSolidServer/JavaScriptSolidServer>
+  (AGPL-3.0-only)
 
 General Solid project:
 
@@ -716,9 +754,15 @@ Dual-licensed under either of:
 - Apache Licence, Version 2.0 ([`LICENSE-APACHE`](./LICENSE-APACHE)
   or <https://www.apache.org/licenses/LICENSE-2.0>)
 
-at your option. This matches Rust ecosystem convention and is
-compatible with (and deliberately not more restrictive than) the MIT
-licence of the Community Solid Server reference.
+at your option. This matches Rust ecosystem convention.
+
+JSS (the JavaScriptSolidServer reference) is licensed AGPL-3.0-only.
+solid-pod-rs is NOT a derivative work of JSS's JavaScript source, so
+the MIT/Apache-2.0 dual licensing is deliberate and consistent. See
+[`NOTICE`](./NOTICE) §"Licence relationship to JavaScriptSolidServer
+(JSS)" for the full rationale. Consumers bundling both solid-pod-rs
+and JSS together must verify their own compliance with AGPL-3.0's
+network-service clause for JSS.
 
 Unless you explicitly state otherwise, any contribution intentionally
 submitted for inclusion in the work by you, as defined in the
@@ -732,7 +776,7 @@ See [`NOTICE`](./NOTICE) for attribution details.
 <sub>
 solid-pod-rs is a DreamLab AI open-source project. Extracted from
 VisionClaw (<https://github.com/DreamLab-AI/VisionClaw>) on
-2026-04-20. Credit to the Community Solid Server team — Melvin
-Pirera et al. — for the reference implementation against which this
-Rust port was benchmarked.
+2026-04-20. Credit to the JavaScriptSolidServer contributors for
+the reference implementation against which this Rust port was
+benchmarked.
 </sub>

tests/interop_jss.rs

@@ -1,4 +1,4 @@
-//! JSS (Community Solid Server) interop parity harness.
+//! JSS (JavaScriptSolidServer) interop parity harness.
 //!
 //! Thin harness that asserts solid-pod-rs response shapes match the
 //! reference JSS responses for common Solid Protocol requests.

tests/wac_inheritance.rs

@@ -1,9 +1,13 @@
 //! WAC inheritance corpus.
 //!
-//! Scenarios adapted from the JSS reference test suite at
-//! `references/community-solid-server/test/unit/authorization/`.
-//! Each test maps a Solid Protocol / WAC spec clause onto an assertion
-//! against `evaluate_access`.
+//! Scenarios independently authored against the Solid Protocol's WAC
+//! spec clauses. Where they resemble the JSS (JavaScriptSolidServer)
+//! reference test suite at
+//! `references/javascript-solid-server/test/unit/authorization/`, that
+//! is because the Solid Protocol admits a finite number of edge cases,
+//! not because JSS test code was copied. Each test maps a Solid
+//! Protocol / WAC spec clause onto an assertion against
+//! `evaluate_access`.
 
 use solid_pod_rs::wac::{
     evaluate_access, evaluate_access_with_groups, AccessMode, AclAuthorization, AclDocument,