chore: migrate license from PMPL-1.0-or-later to MPL-2.0

hyperpolymath · hyperpolymath · commit f632e0c7385c · 2026-05-22T14:47:22.000+01:00
diff --git a/.gitattributes b/.gitattributes
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # RSR-compliant .gitattributes
 
 * text=auto eol=lf
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 version: 2
 updates:
   - package-ecosystem: "github-actions"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: CodeQL Security Analysis
 
 on:
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # governance.yml — single wrapper calling the shared estate governance bundle
 # in hyperpolymath/standards instead of carrying per-repo copies.
 #
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Hypatia Neurosymbolic CI/CD Security Scan
 name: Hypatia Security Scan
 
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 name: Mirror to Git Forges
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 on:
   push:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 
diff --git a/.gitignore b/.gitignore
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # RSR-compliant .gitignore
 
 # OS & Editor
diff --git a/.machine_readable/6a2/AGENTIC.a2ml b/.machine_readable/6a2/AGENTIC.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # AGENTIC.a2ml — AI agent constraints and capabilities
@@ -19,7 +19,7 @@ can-create-files = true
 # - Never commit secrets or credentials
 # - Never use banned languages (TypeScript, Python, Go, etc.)
 # - Never place state files in repository root (must be in .machine_readable/)
-# - Never use AGPL license (use PMPL-1.0-or-later)
+# - Never use AGPL license (use MPL-2.0)
 
 [maintenance-integrity]
 fail-closed = true
diff --git a/.machine_readable/6a2/ECOSYSTEM.a2ml b/.machine_readable/6a2/ECOSYSTEM.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # ECOSYSTEM.a2ml — Bgp Backbone Lab ecosystem position
diff --git a/.machine_readable/6a2/META.a2ml b/.machine_readable/6a2/META.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # META.a2ml — Bgp Backbone Lab meta-level information
@@ -7,7 +7,7 @@ version = "0.1.0"
 last-updated = "2026-04-11"
 
 [project-info]
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 author = "Jonathan D.A. Jewell (hyperpolymath)"
 
 [architecture-decisions]
diff --git a/.machine_readable/6a2/NEUROSYM.a2ml b/.machine_readable/6a2/NEUROSYM.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # NEUROSYM.a2ml — Neurosymbolic integration metadata
diff --git a/.machine_readable/6a2/PLAYBOOK.a2ml b/.machine_readable/6a2/PLAYBOOK.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # PLAYBOOK.a2ml — Operational playbook
diff --git a/.machine_readable/6a2/STATE.a2ml b/.machine_readable/6a2/STATE.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # STATE.a2ml — Bgp Backbone Lab project state
diff --git a/.machine_readable/svc/k9/README.adoc b/.machine_readable/svc/k9/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 = K9 Contractiles
 :toc: left
 :icons: font
diff --git a/.machine_readable/svc/k9/examples/ci-config.k9.ncl b/.machine_readable/svc/k9/examples/ci-config.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Example Yard-level K9 component: CI/CD configuration with validation
 # Security Level: Yard (Nickel evaluation, contract validation)
 # Signature recommended but not required
diff --git a/.machine_readable/svc/k9/examples/project-metadata.k9.ncl b/.machine_readable/svc/k9/examples/project-metadata.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Example Kennel-level K9 component: Project metadata
 # Security Level: Kennel (pure data, no execution)
 # No signature required
@@ -40,7 +40,7 @@ K9!
       organization = "The Open University",
     },
 
-    license = "PMPL-1.0-or-later",
+    license = "MPL-2.0",
 
     keywords = [
       "rhodium-standard",
diff --git a/.machine_readable/svc/k9/examples/setup-repo.k9.ncl b/.machine_readable/svc/k9/examples/setup-repo.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Example Hunt-level K9 component: Repository setup automation
 # Security Level: Hunt (full execution with Just recipes)
 # ⚠️ SIGNATURE REQUIRED - DO NOT RUN WITHOUT VERIFICATION
diff --git a/.machine_readable/svc/k9/template-hunt.k9.ncl b/.machine_readable/svc/k9/template-hunt.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # K9 Hunt-level template: Full execution with Just recipes
 # Security Level: Hunt (full system access)
 # ⚠️ SIGNATURE REQUIRED - Review carefully before use
diff --git a/.machine_readable/svc/k9/template-kennel.k9.ncl b/.machine_readable/svc/k9/template-kennel.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # K9 Kennel-level template: Pure data configuration
 # Security Level: Kennel (data-only, no execution)
 # No signature required - safe for any use
diff --git a/.machine_readable/svc/k9/template-yard.k9.ncl b/.machine_readable/svc/k9/template-yard.k9.ncl
@@ -1,5 +1,5 @@
 K9!
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # K9 Yard-level template: Configuration with validation
 # Security Level: Yard (Nickel evaluation with contracts)
 # Signature recommended but not required
diff --git a/0-AI-MANIFEST.a2ml b/0-AI-MANIFEST.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # 0-AI-MANIFEST.a2ml — AI Agent Entry Point
 # Repository: bgp-backbone-lab
 # Owner: hyperpolymath
@@ -12,5 +12,5 @@
     (machine-readable ".machine_readable/"))
   (invariants
     (scm-files-location ".machine_readable/ ONLY — never root")
-    (license "PMPL-1.0-or-later")
+    (license "MPL-2.0")
     (github-is-source-of-truth #t)))
diff --git a/ABI-FFI-README.md b/ABI-FFI-README.md
@@ -374,7 +374,7 @@ When modifying the ABI/FFI:
 
 ## License
 
-PMPL-1.0-or-later
+MPL-2.0
 
 ## See Also
 
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge
diff --git a/CONTRIBUTING.adoc b/CONTRIBUTING.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 = Contributing Guide
 
 == Getting Started
diff --git a/Justfile b/Justfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Justfile for bgp-backbone-lab
 
 default:
diff --git a/LICENSE b/LICENSE
@@ -1,12 +1,12 @@
-SPDX-License-Identifier: PMPL-1.0-or-later
+SPDX-License-Identifier: MPL-2.0
 SPDX-FileCopyrightText: 2024-2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 
 ------------------------------------------------------------------------
-PREFERRED LICENCE: Palimpsest License (PMPL-1.0-or-later)
+PREFERRED LICENCE: Palimpsest License (MPL-2.0)
 ------------------------------------------------------------------------
 
-This work is governed by the Palimpsest License (PMPL-1.0-or-later) as
-its primary intended licence. PMPL-1.0-or-later extends the Mozilla
+This work is governed by the Palimpsest License (MPL-2.0) as
+its primary intended licence. MPL-2.0 extends the Mozilla
 Public License 2.0 (MPL-2.0) with additional provisions for ethical use,
 post-quantum cryptographic provenance, and emotional lineage protection.
 The canonical PMPL text and stewardship information are maintained at:
@@ -16,16 +16,16 @@ The canonical PMPL text and stewardship information are maintained at:
 FALLBACK LICENCE: Mozilla Public License 2.0 (MPL-2.0)
 ------------------------------------------------------------------------
 
-Because PMPL-1.0-or-later is not yet recognised by the Open Source
+Because MPL-2.0 is not yet recognised by the Open Source
 Initiative (OSI) or equivalent bodies, this work also carries MPL-2.0
 as its legally-recognised fallback licence.
 
-In any jurisdiction, platform, or context where PMPL-1.0-or-later is
+In any jurisdiction, platform, or context where MPL-2.0 is
 not accepted as a valid licence, or where an OSI-approved licence is
 required, this work is instead governed by the Mozilla Public License,
 Version 2.0.
 
-MPL-2.0 was chosen as the fallback because PMPL-1.0-or-later is
+MPL-2.0 was chosen as the fallback because MPL-2.0 is
 explicitly based on and extends MPL-2.0; it is therefore the closest
 recognised equivalent to the intended licence.
 
diff --git a/MAINTAINERS.adoc b/MAINTAINERS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 = Maintainers
 :toc: preamble
 
diff --git a/Mustfile b/Mustfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 
diff --git a/PALIMPSEST.adoc b/PALIMPSEST.adoc
@@ -10,7 +10,7 @@ toc::[]
 == Legal Status
 
 This project is licensed under the **Palimpsest-MPL License 1.0 (PMPL-1.0)**.
-For SPDX and tooling, use **PMPL-1.0-or-later**.
+For SPDX and tooling, use **MPL-2.0**.
 
 PMPL-1.0 incorporates the Mozilla Public License 2.0 by reference and adds
 ethical-use, provenance, and lineage requirements.
@@ -26,7 +26,7 @@ ethical-use, provenance, and lineage requirements.
 
 1. Include the PMPL-1.0 license text in `LICENSE`.
 2. Add SPDX headers to source files:
-   `SPDX-License-Identifier: PMPL-1.0-or-later`
+   `SPDX-License-Identifier: MPL-2.0`
 3. Add a Palimpsest badge to your README (see `assets/badges/` and `embed/license-blocks/`).
 
 == Versioning
diff --git a/README.adoc b/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // SPDX-FileCopyrightText: 2025-2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 = bgp-backbone-lab
@@ -241,4 +241,4 @@ Next:: Containerlab topology definitions
 
 == License
 
-PMPL-1.0-or-later
+MPL-2.0
diff --git a/ROADMAP.adoc b/ROADMAP.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 = Bgp Backbone Lab Roadmap
 
 == Current Status
diff --git a/RSR_OUTLINE.adoc b/RSR_OUTLINE.adoc
@@ -209,7 +209,7 @@ This template is part of:
 
 == License
 
-SPDX-License-Identifier: PMPL-1.0-or-later
+SPDX-License-Identifier: MPL-2.0
 
 == Links
 
diff --git a/bgp-backbone-lab.manifest.ncl b/bgp-backbone-lab.manifest.ncl
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # bgp-backbone-lab module manifest for FlatRacoon orchestrator
 
 {
diff --git a/contractiles/dust/Dustfile b/contractiles/dust/Dustfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Dustfile template - recovery and rollback semantics
 
 version: 1
diff --git a/contractiles/must/Mustfile b/contractiles/must/Mustfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Mustfile - declarative state contract (template)
 # See: https://github.com/hyperpolymath/mustfile
 
diff --git a/contractiles/trust/Trustfile.hs b/contractiles/trust/Trustfile.hs
@@ -1,4 +1,4 @@
--- SPDX-License-Identifier: PMPL-1.0-or-later
+-- SPDX-License-Identifier: MPL-2.0
 -- Trustfile template - cryptographic and provenance verification
 
 module Trustfile where
diff --git a/docs/CITATIONS.adoc b/docs/CITATIONS.adoc
@@ -10,7 +10,7 @@
   title = {RSR-template-repo},
   year = {2025},
   url = {https://github.com/hyperpolymath/RSR-template-repo},
-  license = {PMPL-1.0-or-later}
+  license = {MPL-2.0}
 }
 ----
 
diff --git a/examples/SafeDOMExample.res b/examples/SafeDOMExample.res
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Example: Using SafeDOM for formally verified DOM mounting
 
 open SafeDOM
diff --git a/ffi/zig/build.zig b/ffi/zig/build.zig
@@ -1,5 +1,5 @@
 // {{PROJECT}} FFI Build Configuration
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 
 const std = @import("std");
 
diff --git a/ffi/zig/src/main.zig b/ffi/zig/src/main.zig
@@ -3,7 +3,7 @@
 // This module implements the C-compatible FFI declared in src/abi/Foreign.idr
 // All types and layouts must match the Idris2 ABI definitions.
 //
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 
 const std = @import("std");
 
diff --git a/ffi/zig/test/integration_test.zig b/ffi/zig/test/integration_test.zig
@@ -1,5 +1,5 @@
 // {{PROJECT}} Integration Tests
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 //
 // These tests verify that the Zig FFI correctly implements the Idris2 ABI
 
diff --git a/hooks/validate-codeql.sh b/hooks/validate-codeql.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Pre-commit hook: Validate CodeQL language matrix matches repo
 set -euo pipefail
 
diff --git a/hooks/validate-permissions.sh b/hooks/validate-permissions.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Pre-commit hook: Validate workflow permissions declarations
 set -euo pipefail
 ERRORS=0
diff --git a/hooks/validate-sha-pins.sh b/hooks/validate-sha-pins.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Pre-commit hook: Validate GitHub Actions are SHA-pinned
 
 set -euo pipefail
diff --git a/hooks/validate-spdx.sh b/hooks/validate-spdx.sh
diff --git a/manifests/containerlab-job.yaml b/manifests/containerlab-job.yaml
diff --git a/topologies/flatracoon-bgp.clab.yml b/topologies/flatracoon-bgp.clab.yml

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`# RSR-compliant .gitattributes`
`3`	`3`
`4`	`4`	`* text=auto eol=lf`