chore: migrate license from PMPL-1.0-or-later to MPL-2.0

hyperpolymath · hyperpolymath · commit 2c40dc539d43 · 2026-05-22T14:51:03.000+01:00
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: CodeQL Security Analysis
 
 on:
diff --git a/.github/workflows/guix-nix-policy.yml b/.github/workflows/guix-nix-policy.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Guix/Nix Package Policy
 on: [push, pull_request]
 
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Hypatia Neurosymbolic CI/CD Security Scan
 name: Hypatia Security Scan
 
diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Instant Forge Sync - Triggers propagation to all forges on push/release
 name: Instant Sync
 
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell
 name: Mirror to Git Forges
 
diff --git a/.github/workflows/npm-bun-blocker.yml b/.github/workflows/npm-bun-blocker.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: NPM/Bun Blocker
 on: [push, pull_request]
 
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Code Quality
 on: [push, pull_request]
 
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
@@ -1,6 +1,6 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # RSR Anti-Pattern CI Check
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm
 # Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # rust-ci.yml — Cargo build, test, clippy, and fmt for Rust projects.
diff --git a/.github/workflows/scorecard-enforcer.yml b/.github/workflows/scorecard-enforcer.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Prevention workflow - runs OpenSSF Scorecard and fails on low scores
 name: OpenSSF Scorecard Enforcer
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 on:
   push:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Security Policy
 on: [push, pull_request]
 
diff --git a/.github/workflows/ts-blocker.yml b/.github/workflows/ts-blocker.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: TypeScript/JavaScript Blocker
 on: [push, pull_request]
 
diff --git a/.github/workflows/wellknown-enforcement.yml b/.github/workflows/wellknown-enforcement.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Well-Known Standards (RFC 9116 + RSR)
 on:
   push:
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # workflow-linter.yml - Validates GitHub workflows against RSR security standards
 # This workflow can be copied to other repos for consistent enforcement
 name: Workflow Security Linter
@@ -37,7 +37,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: PMPL-1.0-or-later' as first line"
+            echo "Add '# SPDX-License-Identifier: MPL-2.0' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"
diff --git a/0-AI-MANIFEST.a2ml b/0-AI-MANIFEST.a2ml
@@ -1,4 +1,4 @@
-; SPDX-License-Identifier: PMPL-1.0-or-later
+; SPDX-License-Identifier: MPL-2.0
 ; SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 ;
 ; 0-AI-MANIFEST.a2ml — Universal AI entry point for Invariant Path
@@ -9,7 +9,7 @@
     (name "invariant-path")
     (full-name "Invariant Path")
     (version "0.2.0")
-    (license "PMPL-1.0-or-later")
+    (license "MPL-2.0")
     (author "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>")
     (status "starred"))
 
diff --git a/Cargo.toml b/Cargo.toml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 [workspace]
 resolver = "2"
 members = [
@@ -9,7 +9,7 @@ members = [
 [workspace.package]
 version = "0.1.0"
 edition = "2021"
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 
 [workspace.dependencies]
 serde = { version = "1.0", features = ["derive"] }
diff --git a/README.adoc b/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 = Invariant Path
diff --git a/crates/invariant-path-cli/Cargo.toml b/crates/invariant-path-cli/Cargo.toml
@@ -1,9 +1,9 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 [package]
 name = "invariant-path-cli"
 version = "0.1.0"
 edition = "2021"
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 description = "CLI for Invariant Path semantic overlay MVP"
 
 [dependencies]
diff --git a/crates/invariant-path-cli/src/main.rs b/crates/invariant-path-cli/src/main.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use clap::{Parser, Subcommand, ValueEnum};
diff --git a/crates/invariant-path-core/Cargo.toml b/crates/invariant-path-core/Cargo.toml
@@ -1,9 +1,9 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 [package]
 name = "invariant-path-core"
 version = "0.1.0"
 edition = "2021"
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 description = "Core extractor/classifier/storage components for Invariant Path"
 
 [dependencies]
diff --git a/crates/invariant-path-core/benches/multi_root_grounding.rs b/crates/invariant-path-core/benches/multi_root_grounding.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use criterion::{criterion_group, criterion_main, Criterion};
diff --git a/crates/invariant-path-core/benches/pipeline_bench.rs b/crates/invariant-path-core/benches/pipeline_bench.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 use criterion::{black_box, criterion_group, criterion_main, Criterion};
 use invariant_path_core::pipeline::scan_artifact;
 use invariant_path_core::model::Visibility;
diff --git a/crates/invariant-path-core/src/annotations.rs b/crates/invariant-path-core/src/annotations.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use crate::model::{now_rfc3339, Annotation, OverlayState, Status, Visibility};
diff --git a/crates/invariant-path-core/src/classifier.rs b/crates/invariant-path-core/src/classifier.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use crate::model::{ClaimCandidate, Classification, ClassificationOutcome, InvariantType};
diff --git a/crates/invariant-path-core/src/doc_claims.rs b/crates/invariant-path-core/src/doc_claims.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 //! Document-claim grounding.
diff --git a/crates/invariant-path-core/src/extractor.rs b/crates/invariant-path-core/src/extractor.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use crate::model::{ClaimCandidate, Span};
diff --git a/crates/invariant-path-core/src/lib.rs b/crates/invariant-path-core/src/lib.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 pub mod annotations;
diff --git a/crates/invariant-path-core/src/model.rs b/crates/invariant-path-core/src/model.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use serde::{Deserialize, Serialize};
diff --git a/crates/invariant-path-core/src/pipeline.rs b/crates/invariant-path-core/src/pipeline.rs
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 #![forbid(unsafe_code)]
 
 use crate::classifier::classify_candidate;
diff --git a/invariant-path-launcher b/invariant-path-launcher
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Invariant Path Launcher (Quandle) - Standardized launcher following UX standards
 # D-SIP-FV-MA Compliant: Dependable, Secure, Interoperable, Performant,
diff --git a/profiles/pmpl.md b/profiles/pmpl.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 
 # Profile: pmpl
 
diff --git a/profiles/standards-docs.md b/profiles/standards-docs.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 
 # Profile: standards-docs
 
diff --git a/scripts/install-desktop.sh b/scripts/install-desktop.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Install Invariant Path desktop/start-menu shortcuts.
 
 set -euo pipefail
diff --git a/src/ui/tea/invariant_path_gui.affine b/src/ui/tea/invariant_path_gui.affine
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Invariant Path GUI — AffineScript TEA Interface
 // Underpinned by Cadre Router (Affine Stack Implementation)
 //

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: CodeQL Security Analysis`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`# RSR Anti-Pattern CI Check`
`3`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`3`	`+# SPDX-License-Identifier: MPL-2.0`
`4`	`4`	`#`
`5`	`5`	`# Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm`
`6`	`6`	`# Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme`