docs: keep the public repository concise

Signed-off-by: faratech <35661811+faratech@users.noreply.github.com>

Author: faratech

.github/workflows/ci.yml

@@ -45,7 +45,7 @@ jobs:
           fi
 
       - name: Check dependency license policy and inventory
-        run: python3 scripts/check-dependency-licenses.py --check DEPENDENCY_LICENSES.md
+        run: python3 scripts/check-dependency-licenses.py >/dev/null
 
       - name: Validate bundled configuration
         run: cargo run -p httpjet --locked -- --root "$GITHUB_WORKSPACE/examples/litespeed" check --strict

CHANGELOG.md

@@ -131,25 +131,21 @@ does not require a proprietary-relicensing CLA. See
 [CONTRIBUTING.md](CONTRIBUTING.md).
 
 Report vulnerabilities privately as described in [SECURITY.md](SECURITY.md).
-Third-party attributions are in
-[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md), with development provenance
-summarized in [PROVENANCE.md](PROVENANCE.md).
+Third-party attributions are in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
 
 ## Sponsorship
 
-Sponsorship is optional recognition and support for maintenance. It does not
-buy private features, change support obligations, or restrict anyone's GPL
-rights. Available funding links appear in GitHub's **Sponsor** button when
-enabled. See [SPONSORSHIP.md](SPONSORSHIP.md) for the recognition-only policy
-and current enrollment status.
+Donations are optional support for maintenance. They do not buy private
+features, support obligations, or influence over the roadmap. Funding links
+will appear in GitHub's **Sponsor** button when enrollment is enabled.
 
 ## License and names
 
 Copyright © FaraTech.
 
 FaraTech-owned code and documentation are licensed under
 [GNU GPL version 3 only](LICENSE). Third-party components retain their own
-licenses. See [TRADEMARKS.md](TRADEMARKS.md) for use of the httpjet name.
+licenses.
 
 LiteSpeed and OpenLiteSpeed are names of their respective owners. httpjet is
 an independent project and is not affiliated with or endorsed by LiteSpeed

DEPENDENCY_LICENSES.md

@@ -3,6 +3,10 @@
 httpjet includes and depends on third-party software. The project license does
 not replace those components' own license terms.
 
+Compatibility work used public documentation, black-box behavior, and review
+of GPL-licensed OpenLiteSpeed source. No OpenLiteSpeed source tree is vendored
+in this repository.
+
 ## Vendored source
 
 | Component | Version or basis | License | Location |
@@ -23,10 +27,10 @@ authors.
 
 ## Cargo dependencies
 
-The Rust dependency graph is pinned in `Cargo.lock`; its generated license
-inventory is in `DEPENDENCY_LICENSES.md`. Binary distributors must review the
-licenses for the exact graph they ship and reproduce every notice required by
-those dependencies. Optional features can change that graph.
+The Rust dependency graph is pinned in `Cargo.lock`. Run
+`python3 scripts/check-dependency-licenses.py` to inspect its generated license
+inventory. Binary distributors must review the exact graph they ship and
+reproduce every required notice. Optional features can change that graph.
 
 The `profiling` feature emits raw pprof protobuf data. Rendering is deliberately
 left to an external tool so the CDDL-licensed `inferno` renderer is not linked

PROVENANCE.md

@@ -68,6 +68,6 @@ fi
     --check
 
 "$destination/scripts/check-dependency-licenses.py" \
-    --check "$destination/DEPENDENCY_LICENSES.md"
+    >/dev/null
 
 echo "public source snapshot created at $destination"