chore(licence): normalise to MPL-2.0 + CC-BY-SA-4.0 (canonical pair)

.github/workflows/governance.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Governance
 
 on:

.github/workflows/hypatia-scan.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Hypatia Security Scan
 
 on:

.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 
 on:

.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: Secret Scanner
 
 on:

.machine_readable/agent_instructions/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Agent Instructions
 :toc: preamble

.machine_readable/svc/k9/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = K9 Contractiles
 :toc: left
 :icons: font

CHANGELOG.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 -->
 

CODE_OF_CONDUCT.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

EXPLAINME.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Sanctify-PHP — Show Me The Receipts
 :toc:

LICENSE

@@ -1,5 +1,3 @@
-SPDX-License-Identifier: MPL-2.0
-
 Mozilla Public License Version 2.0
 ==================================
 

MAINTAINERS.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Maintainers
 :toc: preamble
 

PALIMPSEST.adoc

@@ -2,7 +2,7 @@
 :toc:
 :toc-placement!:
 
-image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
+image:https://img.shields.io/badge/License-MPL--2.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"]
 image:https://img.shields.io/badge/Philosophy-Palimpsest-indigo.svg[Palimpsest,link="https://github.com/hyperpolymath/palimpsest-license"]
 
 toc::[]
@@ -26,7 +26,7 @@ ethical-use, provenance, and lineage requirements.
 
 1. Include the PMPL-1.0 license text in `LICENSE`.
 2. Add SPDX headers to source files:
-   `SPDX-License-Identifier: MPL-2.0`
+   `SPDX-License-Identifier: CC-BY-SA-4.0`
 3. Add a Palimpsest badge to your README (see `assets/badges/` and `embed/license-blocks/`).
 
 == Versioning

PRIORITY.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = sanctify-php Priority List
 :toc:
 

PROOF-NEEDS.md

@@ -1,5 +1,5 @@
 # PROOF-NEEDS.md
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 
 ## Current State
 

QUICKSTART-DEV.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-DEV.adoc — clone → build → test → PR
 // Replace sanctify-php, {{BUILD_CMD}}, {{TEST_CMD}}, {{LANG_STACK}} with actuals
 = sanctify-php — Quick Start for Developers

QUICKSTART-MAINTAINER.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-MAINTAINER.adoc — packaging, deploying, and maintaining
 // Replace sanctify-php, {{PACKAGE_NAME}}, {{DEPS}} with actuals
 = sanctify-php — Quick Start for Platform Maintainers

QUICKSTART-USER.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-USER.adoc — 5-minute path to working software
 // Replace sanctify-php, Sanctify Php — See README.adoc for details., just run, Sanctify Php started successfully. with actuals
 = sanctify-php — Quick Start for Users

QUICKSTART.adoc

@@ -160,7 +160,7 @@ Create `.sanctify.yaml` in your project root:
 [source,yaml]
 ----
 # Sanctify-PHP Configuration
-# SPDX-License-Identifier: MPL-2.0
+# SPDX-License-Identifier: CC-BY-SA-4.0
 
 # Analysis options
 analysis:

ROADMAP.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Sanctify Php Roadmap
 
 == Current Status

TOPOLOGY.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
 <!-- Last updated: 2026-02-19 -->
 

contractiles/dust/Dustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PLMP-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Dustfile template - recovery and rollback semantics
 
 version: 1

contractiles/must/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PLMP-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Mustfile - declarative state contract (template)
 # See: https://github.com/hyperpolymath/mustfile
 

docs/IMPLEMENTATION-TRACKER.md

@@ -197,5 +197,5 @@ See `docs/ROADMAP.md` Phase 1 for details.
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*

docs/INDIEWEB-COLLABORATION.md

@@ -284,7 +284,7 @@ X-Bastion-Request-ID: uuid-for-provenance
 ```php
 <?php
 declare(strict_types=1);
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 
 namespace Aegis\IndieWeb;
 
@@ -351,7 +351,7 @@ sanctify-php detects missing IndieWeb security patterns:
 
 ```haskell
 -- src/Sanctify/IndieWeb/Analysis.hs
--- SPDX-License-Identifier: MPL-2.0
+-- SPDX-License-Identifier: CC-BY-SA-4.0
 
 module Sanctify.IndieWeb.Analysis
   ( detectIndieWebEndpoints
@@ -469,5 +469,5 @@ See: hyperpolymath/sanctify-php/docs/INDIEWEB-COLLABORATION.md
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*

docs/INTEGRATION-SUMMARY.md

@@ -213,5 +213,5 @@ The complete Sinople integration found a **real security vulnerability**:
 
 ---
 
-*SPDX-License-Identifier: MPL-2.0
+*SPDX-License-Identifier: CC-BY-SA-4.0
 *SPDX-FileCopyrightText: 2024-2025 hyperpolymath*