chore(license): PMPL → MPL-2.0 sweep (4 files) (#25)

* chore(license): sweep stray PMPL SPDX stamps → MPL-2.0

Per the 2026-06-02 owner directive reinforcing the canonical estate
license policy: PMPL-1.0-or-later is reserved EXCLUSIVELY for
palimpsest-license + palimpsest-plasma + consent-aware-http (prospective).

This repo is sole-owner per the 5-way matrix; MPL-2.0 is the correct
identifier throughout.

Changes:
- SPDX-License-Identifier: PMPL-* / Palimpsest / MPL-2.0-or-later → MPL-2.0
- NOTICE rewritten to plain MPL-2.0 (if it had PMPL framing)
- Orphan LICENSES/PMPL-*.txt deleted (if no remaining PMPL SPDX)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>

* chore(license): pass 2 — catch PMPL-1.0 (no -or-later) variant

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>

* chore(license): pass 3 — CITATION.cff stale AGPL/Palimpsest claim + config-reporter PMPL whitelist removal

Per the 2026-06-02 canonical policy: PMPL only for palimpsest-license / palimpsest-plasma / consent-aware-http. This repo's CITATION.cff claimed a different license than LICENSE+Cargo.toml (which already say MPL-2.0) — fixed. Also removes PMPL from the config-reporter SPDX whitelist where present.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>

---------

Signed-off-by: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: CodeQL Security Analysis
 
 on:

.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: Scorecards supply-chain security
 
 on:

.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: Secret Scanner
 
 on:

NOTICE

@@ -2,21 +2,11 @@ Licensing Notice
 ================
 
 This project is authored by Jonathan D.A. Jewell (hyperpolymath) and
-is licensed under the Palimpsest License (MPL-2.0).
+is licensed under the Mozilla Public License 2.0 (MPL-2.0).
 
-The MPL-2.0 is a philosophical extension of the Mozilla Public
-License 2.0, adding provisions for cryptographic provenance, emotional
-lineage preservation, and quantum-safe signatures. The full PMPL text is
-available in LICENSES/MPL-2.0.txt.
+Per the estate license policy, this is a sole-owner repository and
+uses MPL-2.0 throughout — LICENSE file, package metadata, and all
+SPDX-License-Identifier source-file headers.
 
-For compatibility with automated license detection tools and platforms
-that require OSI-approved licenses, the root LICENSE file contains the
-standard Mozilla Public License 2.0 text. This ensures that package
-registries, CI systems, and other tooling correctly identify the license.
-
-The legally binding terms are:
-  - Source files: governed by MPL-2.0 (per SPDX headers)
-  - Combined works: compatible with MPL-2.0 (per PMPL Section 6)
-
-For more information about the Palimpsest License:
-  https://github.com/hyperpolymath/palimpsest-license
+For the MPL-2.0 license:
+  https://www.mozilla.org/en-US/MPL/2.0/

config-reporter/bin/config-reporter

@@ -148,7 +148,7 @@ for ncl_file in "${NCL_FILES[@]}"; do
 
     # ── SPDX-002: Approved license ───────────────────────────────────
     if head -5 "$ncl_file" | grep -q "SPDX-License-Identifier:"; then
-        if ! head -5 "$ncl_file" | grep -qE "SPDX-License-Identifier:.*(PMPL-1\.0-or-later|MPL-2\.0|MIT|Apache-2\.0|BSD-[23]-Clause)"; then
+        if ! head -5 "$ncl_file" | grep -qE "SPDX-License-Identifier:.*(MPL-2\.0|MIT|Apache-2\.0|BSD-[23]-Clause)"; then
             finding "$ncl_file" "warning" "SPDX-002" "SPDX license not in approved set"
             file_ok=false
         fi