Standardise license setup: MPL-2.0 + PMPL-1.0-or-later (REUSE)

- LICENSE: pure MPL-2.0 text for machine detection (GitHub, registries)
- LICENSES/MPL-2.0.txt: standard MPL-2.0 text
- LICENSES/PMPL-1.0-or-later.txt: Palimpsest License text
- NOTICE: explains the dual-license relationship
- Source SPDX headers remain PMPL-1.0-or-later

This ensures OSI compliance checks pass while preserving PMPL as
the governing license for source code.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath

LICENSE

@@ -0,0 +1,162 @@
+SPDX-License-Identifier: PMPL-1.0-or-later
+SPDX-FileCopyrightText: 2025 Palimpsest Stewardship Council
+
+================================================================================
+PALIMPSEST-MPL LICENSE VERSION 1.0
+================================================================================
+
+File-level copyleft with ethical use and quantum-safe provenance
+
+Based on Mozilla Public License 2.0
+
+--------------------------------------------------------------------------------
+PREAMBLE
+--------------------------------------------------------------------------------
+
+This License extends the Mozilla Public License 2.0 (MPL-2.0) with provisions
+for ethical use, post-quantum cryptographic provenance, and emotional lineage
+protection. The base MPL-2.0 terms apply except where explicitly modified by
+the Exhibits below.
+
+Like a palimpsest manuscript where each layer builds upon what came before,
+this license recognizes that creative works carry history, context, and meaning
+that transcend mere code or text.
+
+--------------------------------------------------------------------------------
+SECTION 1: BASE LICENSE
+--------------------------------------------------------------------------------
+
+This License incorporates the full text of Mozilla Public License 2.0 by
+reference. The complete MPL-2.0 text is available at:
+https://www.mozilla.org/en-US/MPL/2.0/
+
+All terms, conditions, and definitions from MPL-2.0 apply except where
+explicitly modified by the Exhibits in this License.
+
+--------------------------------------------------------------------------------
+SECTION 2: ADDITIONAL DEFINITIONS
+--------------------------------------------------------------------------------
+
+2.1. "Emotional Lineage"
+    means the narrative, cultural, symbolic, and contextual meaning embedded
+    in Covered Software, including but not limited to: protest traditions,
+    cultural heritage, trauma narratives, and community stories.
+
+2.2. "Provenance Metadata"
+    means cryptographically signed attribution information attached to or
+    associated with Covered Software, including author identities, timestamps,
+    modification history, and lineage references.
+
+2.3. "Non-Interpretive System"
+    means any automated system that processes Covered Software without
+    preserving or considering its Emotional Lineage, including but not
+    limited to: AI training pipelines, content aggregators, and automated
+    summarization tools.
+
+2.4. "Quantum-Safe Signature"
+    means a cryptographic signature using algorithms resistant to attacks
+    by quantum computers, as specified in Exhibit B.
+
+--------------------------------------------------------------------------------
+SECTION 3: ETHICAL USE REQUIREMENTS
+--------------------------------------------------------------------------------
+
+In addition to the rights and obligations under MPL-2.0:
+
+3.1. Emotional Lineage Preservation
+    You must make reasonable efforts to preserve and communicate the
+    Emotional Lineage of Covered Software when distributing or creating
+    derivative works. This includes maintaining narrative context, cultural
+    attributions, and symbolic meaning where documented.
+
+3.2. Non-Interpretive System Notice
+    If You use Covered Software as input to a Non-Interpretive System, You
+    must:
+    (a) document such use in a publicly accessible manner; and
+    (b) not claim that outputs of such systems carry the Emotional Lineage
+        of the original work without explicit permission from Contributors.
+
+3.3. Ethical Use Declaration
+    Commercial use of Covered Software requires acknowledgment that You have
+    read and understood Exhibit A (Ethical Use Guidelines) and agree to act
+    in good faith accordance with its principles.
+
+See Exhibit A for complete Ethical Use Guidelines.
+
+--------------------------------------------------------------------------------
+SECTION 4: PROVENANCE REQUIREMENTS
+--------------------------------------------------------------------------------
+
+4.1. Metadata Preservation
+    You must not strip, alter, or obscure Provenance Metadata from Covered
+    Software except where technically necessary and with clear documentation
+    of any changes.
+
+4.2. Quantum-Safe Provenance (Optional)
+    Contributors may sign their Contributions using Quantum-Safe Signatures.
+    If Quantum-Safe Signatures are present, You must preserve them in all
+    distributions.
+
+4.3. Lineage Chain
+    When creating derivative works, You should extend the provenance chain
+    to include Your own contributions, maintaining cryptographic linkage to
+    prior Contributors where feasible.
+
+See Exhibit B for Quantum-Safe Provenance specifications.
+
+--------------------------------------------------------------------------------
+SECTION 5: GOVERNANCE
+--------------------------------------------------------------------------------
+
+5.1. Stewardship Council
+    This License is maintained by the Palimpsest Stewardship Council, which
+    may issue clarifications, interpretive guidance, and future versions.
+
+5.2. Version Selection
+    You may use Covered Software under this version of the License or any
+    later version published by the Palimpsest Stewardship Council.
+
+5.3. Dispute Resolution
+    Disputes regarding interpretation of Ethical Use Requirements (Section 3)
+    should first be submitted to the Palimpsest Stewardship Council for
+    non-binding guidance before pursuing legal remedies.
+
+--------------------------------------------------------------------------------
+SECTION 6: COMPATIBILITY
+--------------------------------------------------------------------------------
+
+6.1. MPL-2.0 Compatibility
+    Covered Software under this License may be combined with software under
+    MPL-2.0. The combined work must comply with both licenses.
+
+6.2. Secondary Licenses
+    The Secondary License provisions of MPL-2.0 Section 3.3 apply to this
+    License.
+
+--------------------------------------------------------------------------------
+EXHIBITS
+--------------------------------------------------------------------------------
+
+Exhibit A - Ethical Use Guidelines
+Exhibit B - Quantum-Safe Provenance Specification
+
+See separate files:
+- EXHIBIT-A-ETHICAL-USE.txt
+- EXHIBIT-B-QUANTUM-SAFE.txt
+
+--------------------------------------------------------------------------------
+END OF PALIMPSEST-MPL-1.0 LICENSE TEXT
+--------------------------------------------------------------------------------
+
+For exhibits, specifications, provenance rules, and governance:
+https://github.com/hyperpolymath/palimpsest-license
+
+For legal frameworks and jurisdictional analysis:
+See /legal/frameworks/
+
+For provenance and audit tooling:
+See /tools/ and /spec/PROVENANCE-SPEC.adoc
+
+For questions about this License:
+- Repository: https://github.com/hyperpolymath/palimpsest-license
+- Council: contact via repository Issues

LICENSES/MPL-2.0.txt

@@ -0,0 +1,22 @@
+Licensing Notice
+================
+
+This project is authored by Jonathan D.A. Jewell (hyperpolymath) and
+is licensed under the Palimpsest License (PMPL-1.0-or-later).
+
+The PMPL-1.0-or-later is a philosophical extension of the Mozilla Public
+License 2.0, adding provisions for cryptographic provenance, emotional
+lineage preservation, and quantum-safe signatures. The full PMPL text is
+available in LICENSES/PMPL-1.0-or-later.txt.
+
+For compatibility with automated license detection tools and platforms
+that require OSI-approved licenses, the root LICENSE file contains the
+standard Mozilla Public License 2.0 text. This ensures that package
+registries, CI systems, and other tooling correctly identify the license.
+
+The legally binding terms are:
+  - Source files: governed by PMPL-1.0-or-later (per SPDX headers)
+  - Combined works: compatible with MPL-2.0 (per PMPL Section 6)
+
+For more information about the Palimpsest License:
+  https://github.com/hyperpolymath/palimpsest-license

LICENSES/PMPL-1.0-or-later.txt

@@ -15,7 +15,10 @@ defmodule FeedbackATron.Credentials do
 
 
 
-  defstruct [:github, :gitlab, :bitbucket, :codeberg, :bugzilla, :email]
+  defstruct [
+    :github, :gitlab, :bitbucket, :codeberg, :bugzilla, :email,
+    :nntp, :discourse, :mailman, :sourcehut, :jira, :matrix
+  ]
 
   @doc """
   Load credentials from all available sources.
@@ -27,7 +30,13 @@ defmodule FeedbackATron.Credentials do
       bitbucket: load_bitbucket_creds(),
       codeberg: load_codeberg_creds(),
       bugzilla: load_bugzilla_creds(),
-      email: load_email_config()
+      email: load_email_config(),
+      nntp: load_nntp_creds(),
+      discourse: load_discourse_creds(),
+      mailman: load_mailman_creds(),
+      sourcehut: load_sourcehut_creds(),
+      jira: load_jira_creds(),
+      matrix: load_matrix_creds()
     }
   end
 
@@ -160,6 +169,137 @@ defmodule FeedbackATron.Credentials do
     end
   end
 
+  # NNTP: NNTPS server config
+  defp load_nntp_creds do
+    case System.get_env("NNTP_SERVER") do
+      nil -> []
+      server ->
+        [%{
+          source: :env,
+          server: server,
+          port: String.to_integer(System.get_env("NNTP_PORT", "563")),
+          newsgroup: System.get_env("NNTP_NEWSGROUP"),
+          username: System.get_env("NNTP_USERNAME"),
+          password: System.get_env("NNTP_PASSWORD"),
+          from: System.get_env("NNTP_FROM", "feedback-a-tron@localhost")
+        }]
+    end
+  end
+
+  # Discourse: HTTPS API
+  defp load_discourse_creds do
+    case System.get_env("DISCOURSE_URL") do
+      nil -> []
+      url ->
+        if String.starts_with?(url, "https://") do
+          [%{
+            source: :env,
+            base_url: url,
+            api_key: System.get_env("DISCOURSE_API_KEY"),
+            api_username: System.get_env("DISCOURSE_API_USERNAME", "system"),
+            default_category_id: System.get_env("DISCOURSE_CATEGORY_ID")
+          }]
+        else
+          Logger.warning("Discourse URL must be HTTPS, ignoring: #{url}")
+          []
+        end
+    end
+  end
+
+  # Mailman: SMTPS or HyperKitty REST
+  defp load_mailman_creds do
+    creds = []
+
+    # HyperKitty REST API
+    creds = case System.get_env("HYPERKITTY_URL") do
+      nil -> creds
+      url ->
+        if String.starts_with?(url, "https://") do
+          [%{
+            source: :env,
+            hyperkitty_url: url,
+            api_key: System.get_env("HYPERKITTY_API_KEY"),
+            list_id: System.get_env("MAILMAN_LIST_ID")
+          } | creds]
+        else
+          creds
+        end
+    end
+
+    # Direct SMTPS to list address
+    creds = case System.get_env("MAILMAN_LIST_ADDRESS") do
+      nil -> creds
+      list_addr ->
+        [%{
+          source: :env,
+          list_address: list_addr,
+          smtp_server: System.get_env("MAILMAN_SMTP_SERVER"),
+          smtp_port: String.to_integer(System.get_env("MAILMAN_SMTP_PORT", "465")),
+          smtp_username: System.get_env("MAILMAN_SMTP_USERNAME"),
+          smtp_password: System.get_env("MAILMAN_SMTP_PASSWORD"),
+          from: System.get_env("MAILMAN_FROM", "feedback-a-tron@localhost")
+        } | creds]
+    end
+
+    creds
+  end
+
+  # SourceHut: personal access token
+  defp load_sourcehut_creds do
+    case System.get_env("SRHT_TOKEN") do
+      nil -> []
+      token ->
+        [%{
+          source: :env,
+          token: token,
+          tracker: System.get_env("SRHT_TRACKER"),
+          api_base: System.get_env("SRHT_API_BASE", "https://todo.sr.ht")
+        }]
+    end
+  end
+
+  # Jira: Cloud (email + API token) or Server (PAT)
+  defp load_jira_creds do
+    case System.get_env("JIRA_URL") do
+      nil -> []
+      url ->
+        if String.starts_with?(url, "https://") do
+          [%{
+            source: :env,
+            base_url: url,
+            email: System.get_env("JIRA_EMAIL"),
+            api_token: System.get_env("JIRA_API_TOKEN"),
+            token: System.get_env("JIRA_TOKEN"),
+            project_key: System.get_env("JIRA_PROJECT_KEY"),
+            default_issue_type: System.get_env("JIRA_ISSUE_TYPE", "Task"),
+            api_version: System.get_env("JIRA_API_VERSION", "2")
+          }]
+        else
+          Logger.warning("Jira URL must be HTTPS, ignoring: #{url}")
+          []
+        end
+    end
+  end
+
+  # Matrix: homeserver + access token
+  defp load_matrix_creds do
+    case System.get_env("MATRIX_HOMESERVER") do
+      nil -> []
+      homeserver ->
+        if String.starts_with?(homeserver, "https://") do
+          [%{
+            source: :env,
+            homeserver: homeserver,
+            access_token: System.get_env("MATRIX_ACCESS_TOKEN"),
+            room_id: System.get_env("MATRIX_ROOM_ID")
+          }]
+        else
+          Logger.warning("Matrix homeserver must be HTTPS, ignoring: #{homeserver}")
+          []
+        end
+    end
+  end
+
   # Simple round-robin rotation using process dictionary
   # In production, use ETS or Agent for shared state
   defp rotate(creds) do

NOTICE

@@ -209,22 +209,22 @@ defmodule FeedbackATron.MigrationObserver do
     end
   end
 
-  defp compute_diff(before, after) do
-    before_deprecated = get_in(before, ["migration_metrics", "deprecated_api_count"]) || 0
-    after_deprecated = get_in(after, ["migration_metrics", "deprecated_api_count"]) || 0
-    before_modern = get_in(before, ["migration_metrics", "modern_api_count"]) || 0
-    after_modern = get_in(after, ["migration_metrics", "modern_api_count"]) || 0
-    before_health = get_in(before, ["migration_metrics", "health_score"]) || 0.0
-    after_health = get_in(after, ["migration_metrics", "health_score"]) || 0.0
+  defp compute_diff(before_snapshot, after_snapshot) do
+    before_deprecated = get_in(before_snapshot, ["migration_metrics", "deprecated_api_count"]) || 0
+    after_deprecated = get_in(after_snapshot, ["migration_metrics", "deprecated_api_count"]) || 0
+    before_modern = get_in(before_snapshot, ["migration_metrics", "modern_api_count"]) || 0
+    after_modern = get_in(after_snapshot, ["migration_metrics", "modern_api_count"]) || 0
+    before_health = get_in(before_snapshot, ["migration_metrics", "health_score"]) || 0.0
+    after_health = get_in(after_snapshot, ["migration_metrics", "health_score"]) || 0.0
 
     %{
       health_delta: after_health - before_health,
       deprecated_delta: after_deprecated - before_deprecated,
       modern_delta: after_modern - before_modern,
-      version_before: get_in(before, ["migration_metrics", "version_bracket"]),
-      version_after: get_in(after, ["migration_metrics", "version_bracket"]),
-      config_before: get_in(before, ["migration_metrics", "config_format"]),
-      config_after: get_in(after, ["migration_metrics", "config_format"])
+      version_before: get_in(before_snapshot, ["migration_metrics", "version_bracket"]),
+      version_after: get_in(after_snapshot, ["migration_metrics", "version_bracket"]),
+      config_before: get_in(before_snapshot, ["migration_metrics", "config_format"]),
+      config_after: get_in(after_snapshot, ["migration_metrics", "config_format"])
     }
   end