chore(licence): normalise to MPL-2.0 (code) + CC-BY-SA-4.0 (docs) (#33)

hyperpolymath · claude · web-flow · commit 6809a816a5de · 2026-06-24T18:06:48.000+01:00
- LICENSES/ = {MPL-2.0.txt, CC-BY-SA-4.0.txt}; root LICENSE = verbatim MPL-2.0 (GitHub display)
- SPDX: code -&gt; MPL-2.0, docs (.md/.adoc) -&gt; CC-BY-SA-4.0; metadata/badge fixes; vendored untouched

Co-authored-by: Claude Opus 4.8 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: CodeQL Security Analysis
 
 on:
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Governance
 
 on:
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: Hypatia Security Scan
 
 on:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 
 on:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: MPL-2.0
 name: Secret Scanner
 
 on:
diff --git a/.machine_readable/agent_instructions/README.adoc b/.machine_readable/agent_instructions/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 = Agent Instructions
 :toc: preamble
diff --git a/.machine_readable/svc/k9/README.adoc b/.machine_readable/svc/k9/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = K9 Contractiles
 :toc: left
 :icons: font
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 -->
 
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Code of Conduct
 
 ## Our Pledge
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Contributing to SDP HKDF Deployment
 
 Thank you for your interest in contributing. Please read these guidelines before submitting changes.
diff --git a/EXPLAINME.adoc b/EXPLAINME.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = SDP HKDF Deployment — Show Me The Receipts
 :toc:
 :icons: font
diff --git a/LICENSE b/LICENSE
@@ -1,5 +1,3 @@
-SPDX-License-Identifier: MPL-2.0
-
 Mozilla Public License Version 2.0
 ==================================
 
diff --git a/LICENSES/CC-BY-SA-4.0.txt b/LICENSES/CC-BY-SA-4.0.txt
diff --git a/LICENSES/PMPL-1.0-or-later.txt b/LICENSES/PMPL-1.0-or-later.txt
diff --git a/MAINTAINERS.adoc b/MAINTAINERS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Maintainers
 :toc: preamble
 
diff --git a/QUICKSTART-DEV.adoc b/QUICKSTART-DEV.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-DEV.adoc — clone → build → test → PR
 // Replace sdp-hkdf-deployment, {{BUILD_CMD}}, {{TEST_CMD}}, {{LANG_STACK}} with actuals
 = sdp-hkdf-deployment — Quick Start for Developers
diff --git a/QUICKSTART-MAINTAINER.adoc b/QUICKSTART-MAINTAINER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-MAINTAINER.adoc — packaging, deploying, and maintaining
 // Replace sdp-hkdf-deployment, {{PACKAGE_NAME}}, {{DEPS}} with actuals
 = sdp-hkdf-deployment — Quick Start for Platform Maintainers
diff --git a/QUICKSTART-USER.adoc b/QUICKSTART-USER.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Template: QUICKSTART-USER.adoc — 5-minute path to working software
 // Replace sdp-hkdf-deployment, Sdp Hkdf Deployment — See README.adoc for details., just run, Sdp Hkdf Deployment started successfully. with actuals
 = sdp-hkdf-deployment — Quick Start for Users
diff --git a/README.adoc b/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = SDP HKDF Deployment
 :author: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
 :revdate: 2026-05-26
diff --git a/ROADMAP.adoc b/ROADMAP.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = SDP HKDF Deployment Roadmap
 
 == Current Status
diff --git a/RSR_OUTLINE.adoc b/RSR_OUTLINE.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = SDP HKDF Deployment - RSR Compliance Outline
 
 image:https://img.shields.io/badge/RSR-Infrastructure-cd7f32[RSR Infrastructure]
@@ -72,7 +72,7 @@ under the Secure Deployment Protocol (SDP) with rootless container execution.
 
 == License
 
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 
 == Links
 
diff --git a/SECURITY.md b/SECURITY.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 # Security Policy
 
 We take security seriously. We appreciate your efforts to responsibly disclose vulnerabilities and will make every effort to acknowledge your contributions.
diff --git a/TOPOLOGY.md b/TOPOLOGY.md
@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: MPL-2.0 -->
+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
 <!-- Last updated: 2026-02-19 -->
 
diff --git a/contractiles/README.adoc b/contractiles/README.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = Contractiles Template Set
 :toc:
 :sectnums:
diff --git a/docs/CITATIONS.adoc b/docs/CITATIONS.adoc
@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 = SDP HKDF Deployment - Citation Guide
 :toc:
 
diff --git a/docs/tech-debt-2026-05-26.md b/docs/tech-debt-2026-05-26.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
 -->
 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: CodeQL Security Analysis`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`name: Governance`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-// SPDX-License-Identifier: MPL-2.0`
	`1`	`+// SPDX-License-Identifier: CC-BY-SA-4.0`
`2`	`2`	`// Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>`
`3`	`3`	`= Agent Instructions`
`4`	`4`	`:toc: preamble`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-<!-- SPDX-License-Identifier: MPL-2.0 -->`
	`1`	`+<!-- SPDX-License-Identifier: CC-BY-SA-4.0 -->`
`2`	`2`	`# Code of Conduct`
`3`	`3`
`4`	`4`	`## Our Pledge`