fix(licence): align everything to MPL-2.0 (governance Licence-consistency CI green) (#23)

hyperpolymath · claude · web-flow · commit d9b9a1448745 · 2026-05-28T09:00:43.000+01:00
LICENSE file is MPL-2.0 but 39 satellite files declared PMPL-1.0-or-later
(SPDX headers, manifest licence fields, badge, docs). The standards
`check-licence-consistency.sh` script compares SPDX header vs each
manifest declaration and was failing on `julia-professional-registry-tests.ipkg`.

This PR resolves everything in favour of MPL-2.0 per owner directive:

- SPDX headers: `PMPL-1.0-or-later` → `MPL-2.0` across 36 files
  (workflows, .a2ml manifests, docs, ipkg, Justfile-style, scheme)
- Manifest licence fields: `stapeln.toml`, `.machine_readable/6a2/META.a2ml`
- Human-visible: GOVERNANCE/TOPOLOGY/CONTRIBUTING/llm-warmup docs
- README badge: PMPL-1.0 (palimpsest-license) → MPL-2.0 (mozilla.org)
- `guix.scm`: dropped palimpsest-license URL, points at mozilla.org MPL/2.0
- `flake.nix`: `licenses.mit` (stale comment said MIT+Palimpsest) → `mpl20`
- `contractile.just` + `contractiles/trust/Trustfile.a2ml`:
  removed `PMPL` from the grep alternation in trust-license-content

Verified locally: `bash standards/scripts/check-licence-consistency.sh`
now reports `[OK] Licence consistency check passed.`

Co-authored-by: Claude Opus 4.7 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # Copilot Instructions
@@ -11,7 +11,7 @@
 
 ## License
 
-- SPDX: `PMPL-1.0-or-later` on all new files.
+- SPDX: `MPL-2.0` on all new files.
 - Never use AGPL-3.0.
 - Copyright: `Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>`.
 
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 ## Summary
 
 <!-- Briefly describe what this PR does and why. Link to related issues with "Closes #N". -->
diff --git a/.github/workflows/boj-build.yml b/.github/workflows/boj-build.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: BoJ Server Build Trigger
 on:
   push:
diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: GitHub Pages
 
 on:
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # governance.yml — single wrapper calling the shared estate governance bundle
 # in hyperpolymath/standards instead of carrying per-repo copies.
 #
diff --git a/.machine_readable/6a2/ECOSYSTEM.a2ml b/.machine_readable/6a2/ECOSYSTEM.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # ECOSYSTEM.a2ml — Ecosystem position
 # Converted from ECOSYSTEM.scm on 2026-03-15
 
diff --git a/.machine_readable/6a2/META.a2ml b/.machine_readable/6a2/META.a2ml
@@ -1,9 +1,9 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # META.a2ml — Project meta-information
 # Converted from META.scm on 2026-03-15
 
 [metadata]
 project = "HyperpolymathRegistry"
 author = "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>"
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 standard = "RSR 2026"
diff --git a/.machine_readable/6a2/STATE.a2ml b/.machine_readable/6a2/STATE.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # STATE.a2ml — Project state checkpoint
 # Converted from STATE.scm on 2026-03-15
 
diff --git a/.machine_readable/CLADE.a2ml b/.machine_readable/CLADE.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Clade declaration — part of the gv-clade-index registry
 # See: https://github.com/hyperpolymath/gv-clade-index
 
diff --git a/.machine_readable/agent_instructions/README.adoc b/.machine_readable/agent_instructions/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Agent Instructions
 :toc: preamble
diff --git a/.machine_readable/agent_instructions/coverage.a2ml b/.machine_readable/agent_instructions/coverage.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # coverage.a2ml — Session coverage tracking
diff --git a/.machine_readable/agent_instructions/debt.a2ml b/.machine_readable/agent_instructions/debt.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # debt.a2ml — Meander debt list
diff --git a/.machine_readable/agent_instructions/methodology.a2ml b/.machine_readable/agent_instructions/methodology.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 #
 # methodology.a2ml — AI agent methodology configuration
diff --git a/.machine_readable/contractiles/bust/Bustfile.a2ml b/.machine_readable/contractiles/bust/Bustfile.a2ml
@@ -1,5 +1,5 @@
 // Bustfile.a2ml — meta-repo bust contractile (breakage / rollback)
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 
 Bust {
     name: "julia-professional-registry"
diff --git a/.machine_readable/contractiles/dust/Dustfile.a2ml b/.machine_readable/contractiles/dust/Dustfile.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Dustfile — Cleanup and Hygiene Contract
 
 [dustfile]
diff --git a/.machine_readable/contractiles/trust/Trustfile.a2ml b/.machine_readable/contractiles/trust/Trustfile.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Trustfile — Integrity and Provenance Contract
 
 [trustfile]
diff --git a/.machine_readable/integrations/feedback-o-tron.a2ml b/.machine_readable/integrations/feedback-o-tron.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Feedback-o-Tron Integration — Autonomous Bug Reporting
 
 [integration]
diff --git a/.machine_readable/integrations/proven.a2ml b/.machine_readable/integrations/proven.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Proven Integration — Formally Verified Safety Library
 
 [integration]
diff --git a/.machine_readable/integrations/verisimdb.a2ml b/.machine_readable/integrations/verisimdb.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # VeriSimDB Feed — Cross-Repo Analytics Data Store
 
 [integration]
diff --git a/.machine_readable/integrations/vexometer.a2ml b/.machine_readable/integrations/vexometer.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Vexometer Integration — Irritation Surface Analysis
 
 [integration]
diff --git a/0-AI-MANIFEST.a2ml b/0-AI-MANIFEST.a2ml
@@ -1,4 +1,4 @@
-;; SPDX-License-Identifier: PMPL-1.0-or-later
+;; SPDX-License-Identifier: MPL-2.0
 ;; 0-AI-MANIFEST.a2ml — AI Agent Entry Point
 ;; Repository: hyperpolymath/HyperpolymathRegistry
 
@@ -13,7 +13,7 @@ AI manifest for HyperpolymathRegistry. Read this file first before any other wor
 ;; Tests: verification/tests/ or tests/
 
 ;; === CRITICAL INVARIANTS ===
-;; - SPDX headers on ALL files (PMPL-1.0-or-later)
+;; - SPDX headers on ALL files (MPL-2.0)
 ;; - No believe_me, assert_total, sorry, Admitted, unsafeCoerce, Obj.magic
 ;; - SCM files ONLY in .machine_readable/ (never root)
 ;; - Author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: PMPL-1.0-or-later
+SPDX-License-Identifier: MPL-2.0
 SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 -->
 
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 # Contributing
 
 Thank you for your interest in contributing! We follow a "Dual-Track" architecture where human-readable documentation lives in the root and machine-readable policies live in `.machine_readable/`.
diff --git a/EXPLAINME.adoc b/EXPLAINME.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = HyperpolymathRegistry — Show Me The Receipts
 :toc:
@@ -163,7 +163,7 @@ secret scanning and EditorConfig enforcement.
 | Vulnerability reporting policy.
 
 | `LICENSE` / `LICENSES/`
-| PMPL-1.0-or-later full text and licence metadata.
+| MPL-2.0 full text and licence metadata.
 |===
 
 == Questions?
diff --git a/GOVERNANCE.adoc b/GOVERNANCE.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Project Governance
 :toc:
@@ -119,4 +119,4 @@ Substantive changes (e.g., changing the governance model itself) should be discu
 
 '''
 
-Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath). Licensed under PMPL-1.0-or-later.
+Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath). Licensed under MPL-2.0.
diff --git a/MAINTAINERS.adoc b/MAINTAINERS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Maintainers
 :toc: preamble
diff --git a/README.adoc b/README.adoc
@@ -1,12 +1,12 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // SPDX-FileCopyrightText: 2025-2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 = julia-professional-registry
 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 :toc:
 
 image:https://img.shields.io/badge/OpenSSF-Best_Practices-green?logo=opensourcesecurity[OpenSSF Best Practices,link="https://www.bestpractices.dev/en/projects/new?repo_url=https://github.com/hyperpolymath/julia-professional-registry"]
-image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
+image:https://img.shields.io/badge/License-MPL--2.0-blue.svg[License: MPL-2.0,link="https://www.mozilla.org/en-US/MPL/2.0/"]
 image:https://api.thegreenwebfoundation.org/greencheckimage/github.com[Green Web,link="https://www.thegreenwebfoundation.org/green-web-check/?url=github.com"]
 
 == Overview
diff --git a/ROADMAP.adoc b/ROADMAP.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 
 = julia-professional-registry: Roadmap
diff --git a/SECURITY.md b/SECURITY.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 # Security Policy
 
 ## Reporting a Vulnerability
diff --git a/TOPOLOGY.md b/TOPOLOGY.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
+<!-- SPDX-License-Identifier: MPL-2.0 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->
 
 # TOPOLOGY.md — HyperpolymathRegistry
@@ -18,7 +18,7 @@ HyperpolymathRegistry/
 │   └── ... (packages starting with B)
 ├── ... (alphabetical package directories)
 ├── README.adoc                # Registry documentation
-└── LICENSE                    # PMPL-1.0-or-later
+└── LICENSE                    # MPL-2.0
 ```
 
 ## Data Flow
@@ -30,6 +30,6 @@ HyperpolymathRegistry/
 ## Key Invariants
 
 - Julia package registry format with standard Registries.toml
-- All registered packages use PMPL-1.0-or-later or compatible licenses
+- All registered packages use MPL-2.0 or compatible licenses
 - Compatible with standard Julia package manager (Pkg)
 - Version resolution follows semantic versioning
diff --git a/contractile.just b/contractile.just
@@ -2,7 +2,7 @@
 # Source directory: contractiles
 # Re-generate with: contractile gen-just --dir contractiles
 #
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 
 # === DUST (Recovery & Rollback) ===
 # Source: Dustfile.a2ml
@@ -62,7 +62,7 @@ trust-verify: trust-license-content trust-no-secrets-committed trust-container-i
 
 # LICENSE contains expected SPDX identifier
 trust-license-content:
-    grep -q 'SPDX\|License\|MIT\|Apache\|PMPL\|MPL' LICENSE
+    grep -q 'SPDX\|License\|MIT\|Apache\|MPL' LICENSE
 
 # No .env or credential files in repo
 trust-no-secrets-committed:
diff --git a/contractiles/intend/Intentfile.a2ml b/contractiles/intend/Intentfile.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Intentfile (A2ML Canonical)
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
 
@@ -8,7 +8,7 @@ Declared intent and purpose for Hyperpolymathregistry.
 
 ## Purpose
 
-Hyperpolymathregistry — // SPDX-License-Identifier: PMPL-1.0-or-later
+Hyperpolymathregistry — // SPDX-License-Identifier: MPL-2.0
 
 ## Anti-Purpose
 
diff --git a/contractiles/must/Mustfile.a2ml b/contractiles/must/Mustfile.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Mustfile (A2ML Canonical)
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
 
diff --git a/contractiles/trust/Trustfile.a2ml b/contractiles/trust/Trustfile.a2ml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Trustfile (A2ML Canonical)
 # Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
 
@@ -16,7 +16,7 @@ Maximal trust by default — LLM may read, build, test, lint, format.
 
 ### license-content
 - description: LICENSE contains expected SPDX identifier
-- run: grep -q 'SPDX\|License\|MIT\|Apache\|PMPL\|MPL' LICENSE
+- run: grep -q 'SPDX\|License\|MIT\|Apache\|MPL' LICENSE
 - severity: critical
 
 ### no-secrets-committed
diff --git a/flake.nix b/flake.nix
@@ -88,7 +88,7 @@
           meta = with pkgs.lib; {
             description = "{project-description}";
             homepage = "{repo-url}";
-            license = with licenses; [ mit ];  # MIT + Palimpsest
+            license = with licenses; [ mpl20 ];  # MPL-2.0
             maintainers = [ "{maintainer-name}" ];
             platforms = platforms.unix;
           };
diff --git a/guix.scm b/guix.scm
@@ -1,4 +1,4 @@
-; SPDX-License-Identifier: PMPL-1.0-or-later
+; SPDX-License-Identifier: MPL-2.0
 ;; guix.scm — GNU Guix package definition for HyperpolymathRegistry
 ;; Usage: guix shell -f guix.scm
 
@@ -14,5 +14,5 @@
   (synopsis "HyperpolymathRegistry")
   (description "HyperpolymathRegistry — part of the hyperpolymath ecosystem.")
   (home-page "https://github.com/hyperpolymath/HyperpolymathRegistry")
-  (license ((@@ (guix licenses) license) "PMPL-1.0-or-later"
-             "https://github.com/hyperpolymath/palimpsest-license")))
+  (license ((@@ (guix licenses) license) "MPL-2.0"
+             "https://www.mozilla.org/en-US/MPL/2.0/")))
diff --git a/julia-professional-registry-tests.ipkg b/julia-professional-registry-tests.ipkg
@@ -1,4 +1,4 @@
--- SPDX-License-Identifier: PMPL-1.0-or-later
+-- SPDX-License-Identifier: MPL-2.0
 -- julia-professional-registry Idris2 test suite. Estate port 4/11.
 
 package julia-professional-registry-tests
diff --git a/llm-warmup-dev.md b/llm-warmup-dev.md
@@ -11,6 +11,6 @@ See README.adoc for overview.
 - `just heal` — attempt auto-repair
 
 ## Quick Context
-- License: PMPL-1.0-or-later
+- License: MPL-2.0
 - Part of hyperpolymath ecosystem
 - See EXPLAINME.adoc for architecture
diff --git a/llm-warmup-user.md b/llm-warmup-user.md
@@ -11,6 +11,6 @@ See README.adoc for overview.
 - `just heal` — attempt auto-repair
 
 ## Quick Context
-- License: PMPL-1.0-or-later
+- License: MPL-2.0
 - Part of hyperpolymath ecosystem
 - See EXPLAINME.adoc for architecture
diff --git a/stapeln.toml b/stapeln.toml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # stapeln.toml — Layer-based container build for HyperpolymathRegistry
 #
 # stapeln builds containers as composable layers (German: "to stack").
@@ -9,7 +9,7 @@ name = "HyperpolymathRegistry"
 version = "0.1.0"
 description = "HyperpolymathRegistry"
 author = "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>"
-license = "PMPL-1.0-or-later"
+license = "MPL-2.0"
 registry = "ghcr.io/hyperpolymath"
 
 [build]

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->`
	`1`	`+<!-- SPDX-License-Identifier: MPL-2.0 -->`
`2`	`2`	`## Summary`
`3`	`3`
`4`	`4`	`<!-- Briefly describe what this PR does and why. Link to related issues with "Closes #N". -->`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: BoJ Server Build Trigger`
`3`	`3`	`on:`
`4`	`4`	`push:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-// SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+// SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`// Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>`
`3`	`3`	`= Agent Instructions`
`4`	`4`	`:toc: preamble`