chore(licence): normalise to MPL-2.0 + CC-BY-SA-4.0 (canonical pair) (#67)

hyperpolymath · claude · web-flow · commit 65ce4f7dbc4f · 2026-06-24T16:57:34.000+01:00
Estate licence normalisation. LICENSES/={MPL-2.0,CC-BY-SA-4.0}; root
LICENSE=verbatim MPL-2.0 (GitHub display); code-&gt;MPL-2.0,
docs(.md/.adoc)-&gt;CC-BY-SA-4.0; vendored untouched. Residual mentions
(mostly legitimate anti-AGPL rules): 18. Manual-review licence PR.

Co-authored-by: Claude Opus 4.8 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.machine_readable/6a2/README.adoc b/.machine_readable/6a2/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # A2ML 6a2 Directory
 
diff --git a/.machine_readable/6a2/anchor/README.adoc b/.machine_readable/6a2/anchor/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # A2ML Anchor Directory
 
diff --git a/.machine_readable/bot_directives/README.adoc b/.machine_readable/bot_directives/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Bot Directives
 :toc: preamble
diff --git a/.machine_readable/self-validating/README.adoc b/.machine_readable/self-validating/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = K9 Contractiles
 :toc: left
diff --git a/.machine_readable/svc/README.adoc b/.machine_readable/svc/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = `.machine_readable/svc/` — moved
 
diff --git a/0001-Add-A2ML-and-K9-MIME-types.patch b/0001-Add-A2ML-and-K9-MIME-types.patch
@@ -93,7 +93,7 @@ index 0000000..c8d5922
 --- /dev/null
 +++ b/tests/mime-detection/test.a2ml
 @@ -0,0 +1,6 @@
-+# SPDX-License-Identifier: CC0-1.0
++# SPDX-License-Identifier: MPL-2.0
 +# test.a2ml — A2ML test file for MIME type detection
 +
 +[metadata]
@@ -106,7 +106,7 @@ index 0000000..c49b316
 +++ b/tests/mime-detection/test.k9
 @@ -0,0 +1,9 @@
 +K9!
-+# SPDX-License-Identifier: CC0-1.0
++# SPDX-License-Identifier: MPL-2.0
 +# test.k9 — K9 test file for MIME type detection
 +
 +---
@@ -121,7 +121,7 @@ index 0000000..52164f5
 +++ b/tests/mime-detection/test.k9.ncl
 @@ -0,0 +1,9 @@
 +K9!
-+# SPDX-License-Identifier: CC0-1.0
++# SPDX-License-Identifier: MPL-2.0
 +# test.k9.ncl — K9 Nickel test file for MIME type detection
 +{
 +  pedigree = {
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # JanusKey Architecture — Reversibility Stack Junction Point
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Changelog
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Contributor Covenant Code of Conduct
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Clone the repository
diff --git a/EXPLAINME.adoc b/EXPLAINME.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = JanusKey — Show Me The Receipts
 :toc:
diff --git a/GOVERNANCE.adoc b/GOVERNANCE.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Governance Model
 :toc: preamble
diff --git a/LICENSE b/LICENSE
@@ -35,7 +35,7 @@ Mozilla Public License Version 2.0
     means any form of the work other than Source Code Form.
 
 1.7. "Larger Work"
-    means a work that combines Covered Software with other material, in
+    means a work that combines Covered Software with other material, in 
     a separate file or files, that is not Covered Software.
 
 1.8. "License"
@@ -357,7 +357,7 @@ Exhibit A - Source Code Form License Notice
 
   This Source Code Form is subject to the terms of the Mozilla Public
   License, v. 2.0. If a copy of the MPL was not distributed with this
-  file, You can obtain one at https://mozilla.org/MPL/2.0/.
+  file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
 If it is not possible or desirable to put the notice in a particular
 file, then You may include the notice in a location (such as a LICENSE
diff --git a/LICENSES/CC-BY-SA-4.0.txt b/LICENSES/CC-BY-SA-4.0.txt
diff --git a/MAINTAINERS.adoc b/MAINTAINERS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Maintainers
 :toc: preamble
diff --git a/PROOF-NEEDS.md b/PROOF-NEEDS.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # PROOF-NEEDS.md — januskey
diff --git a/QUICKSTART-DEV.adoc b/QUICKSTART-DEV.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // Template: QUICKSTART-DEV.adoc — clone → build → test → PR
 // Replace januskey, {{BUILD_CMD}}, {{TEST_CMD}}, {{LANG_STACK}} with actuals
diff --git a/QUICKSTART-MAINTAINER.adoc b/QUICKSTART-MAINTAINER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // Template: QUICKSTART-MAINTAINER.adoc — packaging, deploying, and maintaining
 // Replace januskey, {{PACKAGE_NAME}}, {{DEPS}} with actuals
diff --git a/QUICKSTART-USER.adoc b/QUICKSTART-USER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // Template: QUICKSTART-USER.adoc — 5-minute path to working software
 // Replace januskey, Januskey — See README.adoc for details., just run, Januskey started successfully. with actuals
diff --git a/READINESS.md b/READINESS.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Component Readiness Assessment — januskey
diff --git a/README.adoc b/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = JanusKey
 image:https://img.shields.io/badge/OpenSSF-Best_Practices-green?logo=openssourcesecurity[OpenSSF Best Practices,link="https://www.bestpractices.dev/en/projects/new?repo_url=https://github.com/hyperpolymath/januskey"]
@@ -142,7 +142,7 @@ cargo install --path .
 
 This project is licensed under the Mozilla Public License, v. 2.0. See the `LICENSE` file for details.
 
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 
 == Contributing
 
diff --git a/ROADMAP.adoc b/ROADMAP.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Januskey Roadmap
 
diff --git a/SECURITY.md b/SECURITY.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Security Policy
diff --git a/TEST-NEEDS.md b/TEST-NEEDS.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # TEST-NEEDS.md — januskey
diff --git a/TESTING-REPORT.adoc b/TESTING-REPORT.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 
diff --git a/TOPOLOGY.md b/TOPOLOGY.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
diff --git a/docs/CITATIONS.adoc b/docs/CITATIONS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = januskey - Citation Guide
 :toc:
diff --git a/docs/reports/audit/audit-2026-04-04.md b/docs/reports/audit/audit-2026-04-04.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Audit Report — januskey (2026-04-04)
diff --git a/docs/security/KEY_LIFECYCLE.adoc b/docs/security/KEY_LIFECYCLE.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2024-2025 Jonathan D.A. Jewell
 = JanusKey Key Lifecycle Management
diff --git a/docs/security/THREAT_MODEL.adoc b/docs/security/THREAT_MODEL.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2024-2025 Jonathan D.A. Jewell
 = JanusKey Key Management Threat Model
diff --git a/docs/tech-debt-2026-05-26.md b/docs/tech-debt-2026-05-26.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Tech-Debt Audit — januskey — 2026-05-26
diff --git a/docs/wiki/Home.adoc b/docs/wiki/Home.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = JanusKey Wiki
 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
diff --git a/docs/wiki/api/index.adoc b/docs/wiki/api/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = API Reference
 :toc: left
diff --git a/docs/wiki/architecture/index.adoc b/docs/wiki/architecture/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Architecture Overview
 :toc: left
diff --git a/docs/wiki/examples/index.adoc b/docs/wiki/examples/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Examples and Use Cases
 :toc: left
diff --git a/docs/wiki/formal-proofs/index.adoc b/docs/wiki/formal-proofs/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Formal Proofs
 :toc: left
diff --git a/docs/wiki/guides/cli.adoc b/docs/wiki/guides/cli.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = CLI Commands Guide
 :toc: left
diff --git a/docs/wiki/guides/transactions.adoc b/docs/wiki/guides/transactions.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Transaction Guide
 :toc: left
diff --git a/docs/wiki/operations/index.adoc b/docs/wiki/operations/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Operations Reference
 :toc: left
diff --git a/docs/wiki/theory/formal-model.adoc b/docs/wiki/theory/formal-model.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Formal Model of File System State
 :toc: left
diff --git a/docs/wiki/theory/index.adoc b/docs/wiki/theory/index.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Theoretical Foundations
 :toc: left
diff --git a/docs/wiki/theory/maa-framework.adoc b/docs/wiki/theory/maa-framework.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Mutually Assured Accountability (MAA) Framework
 :toc: left
diff --git a/docs/wiki/theory/mpr.adoc b/docs/wiki/theory/mpr.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Maximal Principle Reduction (MPR)
 :toc: left
diff --git a/docs/wiki/theory/rmo-primitive.adoc b/docs/wiki/theory/rmo-primitive.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = RMO: Obliterative Wipe Primitive
 :toc: left
diff --git a/docs/wiki/theory/rmr-primitive.adoc b/docs/wiki/theory/rmr-primitive.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = RMR: Reversible Transaction Primitive
 :toc: left
diff --git a/llm-warmup-dev.md b/llm-warmup-dev.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # LLM Warmup — januskey (Developer)
diff --git a/llm-warmup-user.md b/llm-warmup-user.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # LLM Warmup — januskey (User)
diff --git a/tests/fuzz/README.adoc b/tests/fuzz/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell
 
diff --git a/tests/regressions/README.adoc b/tests/regressions/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell
 
