chore(license): reconcile residual PMPL prose to canonical MPL-2.0 + CC-BY-SA-4.0 (#172)

## Summary

Follow-up to **#167** (already merged). #167 flagged a
license-classification drift "🚩 for owner (no action taken)": stray
`PMPL-1.0-or-later` strings survived in prose/metadata even though this
repo's canonical license is **MPL-2.0** (code/config) + **CC-BY-SA-4.0**
(docs). The estate already normalised to that pair in
#138/#156/#161/#163; the #156 pass flipped SPDX *header* stamps only,
leaving the bodies behind. This PR clears the residue.

verisimiser is **not** a PMPL carve-out repo, and `LICENSE`,
`LICENSES/`, `Cargo.toml` and every SPDX header are MPL-2.0 — so the
remaining PMPL prose was drift, not intent.

## Changes

**Reconciled (the repo's own license declarations):**

- `.machine_readable/compliance/reuse/dep5` — REUSE/DEP5 default +
config stanzas `PMPL-1.0-or-later` → `MPL-2.0`; the `CC-BY-SA-4.0` docs
override (last-match-wins) is kept intact.
- `.well-known/ai.txt` — code-license line → MPL-2.0; dropped the
`Emotional Lineage per PMPL Section 3` clause (no such obligation exists
in MPL-2.0).
- `.well-known/humans.txt` — `License:` → `MPL-2.0 (code) + CC-BY-SA-4.0
(docs)`.
- `docs/attribution/CITATION.cff` — `license:` → `MPL-2.0`.
- `.machine_readable/ai/{.cursorrules,.clinerules,.windsurfrules}` —
license-policy block → MPL-2.0 canonical pair (kept the `Never AGPL-3.0`
estate rule).
-
`.machine_readable/svc/k9/examples/{project-metadata,setup-repo}.k9.ncl`
— example license string/recipe → MPL-2.0 (the scaffolding recipe no
longer `curl`s a PMPL `LICENSE`).

**Deliberately left untouched (not the repo's own self-declarations —
flagged for owner):**

- `docs/legal/EXHIBIT-A-ETHICAL-USE.txt`,
`docs/legal/EXHIBIT-B-QUANTUM-SAFE.txt` — these are *bodies of the
Palimpsest-MPL license itself*, not a verisimiser license claim. Whether
an MPL-2.0 repo should ship them at all is a removal decision for the
owner, not a find-replace.
- `contractile.just` — the `'SPDX|License|MIT|Apache|PMPL|MPL'` grep is
a generic multi-license *recognizer*, not a declaration; PMPL is a valid
alternative to keep matching.

## RSR Quality Checklist

### Required

- [x] Tests pass — metadata/docs-only change; no code touched, `cargo`
build/test surface unaffected
- [x] Code is formatted — no code changed
- [x] Linter is clean — no new warnings or errors
- [x] No banned language patterns
- [x] No `unsafe` blocks without `// SAFETY:` comments — none added
- [x] No banned functions (`believe_me`, `unsafeCoerce`, `Obj.magic`,
`Admitted`, `sorry`)
- [x] SPDX license headers — all modified files retain their existing
MPL-2.0/CC-BY-SA-4.0 headers; no new files
- [x] No secrets, credentials, or `.env` files

### As Applicable

- [ ] State files — no project-state/architecture change
- [x] New dependencies reviewed — none added
- [x] ABI/FFI consistency — unaffected by this change

## Testing

Verified by inspection + `git grep`: after the change, the only
remaining `PMPL`/`Palimpsest` references are the three
deliberately-preserved cases above (the two license exhibits + the
generic recognizer). The `dep5` `CC-BY-SA-4.0` docs override is
preserved. Canonical MPL-2.0 source URL used in the k9 example was
confirmed reachable (HTTP 200).

## Screenshots

n/a (text-only diff)

---

🤖 Generated with [Claude Code](https://claude.com/claude-code)


---
_Generated by [Claude
Code](https://claude.ai/code/session_01JdqVWGSSv36Ph8ZWvizGMp)_

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/ai/.clinerules

@@ -5,8 +5,8 @@
 # STARTUP: Read 0-AI-MANIFEST.a2ml first, then .machine_readable/STATE.a2ml.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later.
-# Never AGPL-3.0. MPL-2.0 only as platform-required fallback.
+# Code + config: MPL-2.0. Documentation prose: CC-BY-SA-4.0.
+# Never AGPL-3.0.
 # SPDX header required on every source file.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 

.machine_readable/ai/.cursorrules

@@ -5,8 +5,8 @@
 # Read 0-AI-MANIFEST.a2ml in the repo root FIRST for canonical file locations.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later (SPDX header required on every file).
-# Never use AGPL-3.0. Fallback to MPL-2.0 only when platform requires it.
+# Code + config: MPL-2.0 (SPDX header required on every file). Docs prose: CC-BY-SA-4.0.
+# Never use AGPL-3.0.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 
 # STATE FILES

.machine_readable/ai/.windsurfrules

@@ -5,8 +5,8 @@
 # STARTUP: Read 0-AI-MANIFEST.a2ml first, then .machine_readable/STATE.a2ml.
 
 # LICENSE
-# All original code: PMPL-1.0-or-later.
-# Never AGPL-3.0. MPL-2.0 only as platform-required fallback.
+# Code + config: MPL-2.0. Documentation prose: CC-BY-SA-4.0.
+# Never AGPL-3.0.
 # SPDX header required on every source file.
 # Copyright: {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
 

.machine_readable/compliance/reuse/dep5

@@ -3,55 +3,55 @@ Upstream-Name: {{PROJECT_NAME}}
 Upstream-Contact: {{AUTHOR}} <{{AUTHOR_EMAIL}}>
 Source: https://github.com/{{OWNER}}/{{REPO}}
 
-# Default: all files are PMPL-1.0-or-later
+# Default: all files are MPL-2.0
 Files: *
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Configuration files that cannot carry headers
 Files: .editorconfig .gitignore .gitattributes .tool-versions .mailmap
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Machine-readable state files
 Files: .machine_readable/*.a2ml
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Bot directives
 Files: .machine_readable/bot_directives/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Contractiles
 Files: .machine_readable/contractiles/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # GitHub/CI configuration
 Files: .github/* .github/**/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Generated files
 Files: generated/*
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Lockfiles and auto-generated
 Files: *.lock Cargo.lock flake.lock
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Devcontainer config (JSON, no comments)
 Files: .devcontainer/*.json
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Git-cliff config
 Files: cliff.toml
 Copyright: {{CURRENT_YEAR}} {{AUTHOR}} ({{OWNER}}) <{{AUTHOR_EMAIL}}>
-License: PMPL-1.0-or-later
+License: MPL-2.0
 
 # Documentation prose is CC-BY-SA-4.0 (code/config is MPL-2.0).
 # Last-match-wins in the Debian copyright format, so this overrides the

.machine_readable/svc/k9/examples/project-metadata.k9.ncl

@@ -40,7 +40,7 @@ K9!
       organization = "{{AUTHOR_ORG}}",
     },
 
-    license = "PMPL-1.0-or-later",
+    license = "MPL-2.0",
 
     keywords = [
       "rhodium-standard",

.machine_readable/svc/k9/examples/setup-repo.k9.ncl

@@ -130,9 +130,9 @@ K9!
     },
 
     "add-license" = {
-      description = "Add PMPL-1.0 license",
+      description = "Add MPL-2.0 license",
       commands = [
-        "curl -sL https://raw.githubusercontent.com/hyperpolymath/pmpl/main/LICENSE -o LICENSE",
+        "curl -sL https://raw.githubusercontent.com/spdx/license-list-data/main/text/MPL-2.0.txt -o LICENSE",
         "echo '✓ License added'",
       ],
     },

.well-known/ai.txt

@@ -7,10 +7,9 @@ Disallow-Training: yes
 Disallow-Summarization: no
 Disallow-Generation: yes
 
-# This project's code is licensed under PMPL-1.0-or-later.
+# This project's code is licensed under MPL-2.0 (documentation prose under CC-BY-SA-4.0).
 # AI agents may read and analyze this code for assisting contributors.
 # AI agents must NOT use this code for model training without explicit consent.
-# AI agents must preserve Emotional Lineage per PMPL Section 3.
 #
 # For AI agent integration instructions, see:
 #   0-AI-MANIFEST.a2ml (universal AI entry point)

.well-known/humans.txt

@@ -9,6 +9,6 @@ From: United Kingdom
 /* SITE */
 Last update: {{CURRENT_DATE}}
 Standards: RSR (Rhodium Standard Repository)
-License: PMPL-1.0-or-later (Palimpsest MPL)
+License: MPL-2.0 (code) + CC-BY-SA-4.0 (docs)
 Components: Idris2 ABI, Zig FFI
 Tools: just, Podman, Guix

docs/attribution/CITATION.cff

@@ -9,7 +9,7 @@ version: 0.1.0
 date-released: {{CURRENT_DATE}}
 url: "https://{{FORGE}}/{{OWNER}}/{{REPO}}"
 repository-code: "https://{{FORGE}}/{{OWNER}}/{{REPO}}"
-license: PMPL-1.0-or-later
+license: MPL-2.0
 keywords:
   - "rsr"
   - "formal-verification"