licence(#7): PMPL-1.0 -> PMPL-1.0-or-later (owner carve-out, SPDX-only)

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: CodeQL Security Analysis
 
 on:

.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: OSSF Scorecard
 on:
   push:

.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 

bgp-backbone-lab/CODE_OF_CONDUCT.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: PMPL-1.0 -->
+<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

bgp-backbone-lab/Mustfile

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Mustfile - hyperpolymath mandatory checks
 # See: https://github.com/hyperpolymath/mustfile
 

bgp-backbone-lab/hooks/validate-codeql.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Pre-commit hook: Validate CodeQL language matrix matches repo
 set -euo pipefail
 

bgp-backbone-lab/hooks/validate-permissions.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Pre-commit hook: Validate workflow permissions declarations
 set -euo pipefail
 ERRORS=0

bgp-backbone-lab/hooks/validate-sha-pins.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Pre-commit hook: Validate GitHub Actions are SHA-pinned
 
 set -euo pipefail

bgp-backbone-lab/hooks/validate-spdx.sh

@@ -1,19 +1,19 @@
 #!/usr/bin/env bash
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Pre-commit hook: Validate SPDX headers in workflow files
 
 set -euo pipefail
 
 ERRORS=0
-SPDX_PATTERN="^# SPDX-License-Identifier:PMPL-1.0
+SPDX_PATTERN="^# SPDX-License-Identifier:PMPL-1.0-or-later
 
 for workflow in .github/workflows/*.yml .github/workflows/*.yaml; do
     [ -f "$workflow" ] || continue
 
     first_line=$(head -n1 "$workflow")
     if ! echo "$first_line" | grep -qE "$SPDX_PATTERN"; then
         echo "ERROR: Missing SPDX header in $workflow"
-        echo "  First line should be: # SPDX-License-Identifier: PMPL-1.0
+        echo "  First line should be: # SPDX-License-Identifier: PMPL-1.0-or-later
         ERRORS=$((ERRORS + 1))
     fi
 done