Merge branch 'main' into chore/push-email-notify

hyperpolymath · web-flow · commit b9949dbed71f · 2026-06-24T19:16:06.000+01:00
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Governance
 
 on:
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Hypatia Security Scan
 
 on:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 
 on:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: Secret Scanner
 
 on:
diff --git a/.machine_readable/CLADE.a2ml b/.machine_readable/CLADE.a2ml
@@ -24,3 +24,24 @@ bitbucket = "hyperpolymath/sanctify-php"
 type = "standalone"
 parent = "PHP security hardening"
 born = "2026-03-16"
+
+# Lifecycle status (added by clade-status-backfill; see gv-clade-index ADR 0006).
+# Identity (uuid) and status are SEPARATE layers: uuid is immortal; phase is a
+# mutable pointer. No phase is terminal (extinct -> active is a legal "Gitassic
+# Park" transition on the same uuid). A rename is NOT a phase change — the old
+# prefixed-name goes to aliases[], uuid and phase are untouched.
+[status]
+# One of: reserved incubating active dormant | merged superseded archived extinct
+phase = "active"
+since = "2026-03-16"
+present = true
+aliases = []
+merged-into = ""
+superseded-by = ""
+successors = []
+ended = ""
+
+[[status.history]]
+phase = "active"
+since = "2026-03-16"
+note = "backfilled default — correct if the true phase differs"
diff --git a/.machine_readable/agent_instructions/README.adoc b/.machine_readable/agent_instructions/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Agent Instructions
 :toc: preamble
diff --git a/.machine_readable/svc/k9/README.adoc b/.machine_readable/svc/k9/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = K9 Contractiles
 :toc: left
 :icons: font
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 -->
 
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge
diff --git a/EXPLAINME.adoc b/EXPLAINME.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Sanctify-PHP — Show Me The Receipts
 :toc:
diff --git a/LICENSE b/LICENSE
@@ -1,5 +1,3 @@
-SPDX-License-Identifier: MPL-2.0
-
 Mozilla Public License Version 2.0
 ==================================
 
diff --git a/LICENSES/CC-BY-SA-4.0.txt b/LICENSES/CC-BY-SA-4.0.txt
diff --git a/LICENSES/PMPL-1.0-or-later.txt b/LICENSES/PMPL-1.0-or-later.txt
diff --git a/MAINTAINERS.adoc b/MAINTAINERS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Maintainers
 :toc: preamble
 
diff --git a/PALIMPSEST.adoc b/PALIMPSEST.adoc
@@ -2,7 +2,7 @@
 :toc:
 :toc-placement!:
 
-image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
+image:https://img.shields.io/badge/License-MPL--2.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
 image:https://img.shields.io/badge/Philosophy-Palimpsest-indigo.svg[Palimpsest,link="https://github.com/hyperpolymath/palimpsest-license"]
 
 toc::[]
@@ -26,7 +26,7 @@ ethical-use, provenance, and lineage requirements.
 
 1. Include the PMPL-1.0 license text in `LICENSE`.
 2. Add SPDX headers to source files:
-   `SPDX-License-Identifier: MPL-2.0`
+   `SPDX-License-Identifier: CC-BY-SA-4.0`
 3. Add a Palimpsest badge to your README (see `assets/badges/` and `embed/license-blocks/`).
 
 == Versioning
diff --git a/PRIORITY.adoc b/PRIORITY.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = sanctify-php Priority List
 :toc:
 
diff --git a/PROOF-NEEDS.md b/PROOF-NEEDS.md
@@ -1,5 +1,5 @@
 # PROOF-NEEDS.md
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 
 ## Current State
 
diff --git a/QUICKSTART-DEV.adoc b/QUICKSTART-DEV.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-DEV.adoc — clone → build → test → PR
 // Replace sanctify-php, {{BUILD_CMD}}, {{TEST_CMD}}, {{LANG_STACK}} with actuals
 = sanctify-php — Quick Start for Developers
diff --git a/QUICKSTART-MAINTAINER.adoc b/QUICKSTART-MAINTAINER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-MAINTAINER.adoc — packaging, deploying, and maintaining
 // Replace sanctify-php, {{PACKAGE_NAME}}, {{DEPS}} with actuals
 = sanctify-php — Quick Start for Platform Maintainers
diff --git a/QUICKSTART-USER.adoc b/QUICKSTART-USER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-USER.adoc — 5-minute path to working software
 // Replace sanctify-php, Sanctify Php — See README.adoc for details., just run, Sanctify Php started successfully. with actuals
 = sanctify-php — Quick Start for Users
diff --git a/QUICKSTART.adoc b/QUICKSTART.adoc
@@ -160,7 +160,7 @@ Create `.sanctify.yaml` in your project root:
 [source,yaml]
 ----
 # Sanctify-PHP Configuration
-# SPDX-License-Identifier: MPL-2.0
+# SPDX-License-Identifier: CC-BY-SA-4.0
 
 # Analysis options
 analysis:
diff --git a/ROADMAP.adoc b/ROADMAP.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Sanctify Php Roadmap
 
 == Current Status
diff --git a/TOPOLOGY.md b/TOPOLOGY.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
 <!-- Last updated: 2026-02-19 -->
 
diff --git a/contractiles/dust/Dustfile b/contractiles/dust/Dustfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PLMP-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Dustfile template - recovery and rollback semantics
 
 version: 1
diff --git a/contractiles/must/Mustfile b/contractiles/must/Mustfile
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PLMP-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Mustfile - declarative state contract (template)
 # See: https://github.com/hyperpolymath/mustfile
 
diff --git a/docs/IMPLEMENTATION-TRACKER.md b/docs/IMPLEMENTATION-TRACKER.md
@@ -197,5 +197,5 @@ See `docs/ROADMAP.md` Phase 1 for details.
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*
diff --git a/docs/INDIEWEB-COLLABORATION.md b/docs/INDIEWEB-COLLABORATION.md
@@ -284,7 +284,7 @@ X-Bastion-Request-ID: uuid-for-provenance
 ```php
 <?php
 declare(strict_types=1);
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 
 namespace Aegis\IndieWeb;
 
@@ -351,7 +351,7 @@ sanctify-php detects missing IndieWeb security patterns:
 
 ```haskell
 -- src/Sanctify/IndieWeb/Analysis.hs
--- SPDX-License-Identifier: MPL-2.0
+-- SPDX-License-Identifier: CC-BY-SA-4.0
 
 module Sanctify.IndieWeb.Analysis
   ( detectIndieWebEndpoints
@@ -469,5 +469,5 @@ See: hyperpolymath/sanctify-php/docs/INDIEWEB-COLLABORATION.md
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*
diff --git a/docs/INTEGRATION-SUMMARY.md b/docs/INTEGRATION-SUMMARY.md
@@ -213,5 +213,5 @@ The complete Sinople integration found a **real security vulnerability**:
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*
diff --git a/docs/PHP-AEGIS-HANDOVER.md b/docs/PHP-AEGIS-HANDOVER.md
diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
diff --git a/docs/STANDALONE.md b/docs/STANDALONE.md
diff --git a/docs/TARGET-AUDIENCE.md b/docs/TARGET-AUDIENCE.md
diff --git a/docs/UPSTREAM-ISSUES.md b/docs/UPSTREAM-ISSUES.md
diff --git a/docs/accessibility/README.adoc b/docs/accessibility/README.adoc
diff --git a/docs/governance/CRG-AUDIT-2026-04-18.adoc b/docs/governance/CRG-AUDIT-2026-04-18.adoc
diff --git a/docs/governance/CRG-LIFT-PLAN-2026-04-18.adoc b/docs/governance/CRG-LIFT-PLAN-2026-04-18.adoc
diff --git a/docs/tech-debt-2026-05-26.md b/docs/tech-debt-2026-05-26.md
diff --git a/docs/user/USER-GUIDE-PART2.adoc b/docs/user/USER-GUIDE-PART2.adoc
diff --git a/docs/user/USER-GUIDE.adoc b/docs/user/USER-GUIDE.adoc

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: Governance`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: Secret Scanner`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-// SPDX-License-Identifier: MPL-2.0`
	`1`	`+// SPDX-License-Identifier: CC-BY-SA-4.0`
`2`	`2`	`// Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>`
`3`	`3`	`= Agent Instructions`
`4`	`4`	`:toc: preamble`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-<!-- SPDX-License-Identifier: MPL-2.0 -->`
	`1`	`+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->`
`2`	`2`	`# Contributor Covenant Code of Conduct`
`3`	`3`
`4`	`4`	`## Our Pledge`