Update license to Palimpsest-MPL-1.0

Jonathan D.A. Jewell · claude · Jonathan D.A. Jewell · commit b8983086f430 · 2026-01-10T13:14:23.000Z
- Replace LICENSE files with Palimpsest-MPL-1.0
- Update README badges and license references
- Update SPDX headers in workflows
- Update .reuse/dep5 if present

Co-Authored-By: Claude Opus 4.5 &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: GitHub Pages
 
 on:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: MIT AND Palimpsest-0.8
+# SPDX-License-Identifier: PMPL-1.0 AND Palimpsest-0.8
 # SPDX-FileCopyrightText: 2024 Jonathan D.A. Jewell
 
 name: CI
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: CodeQL Security Analysis
 
 on:
diff --git a/.github/workflows/guix-nix-policy.yml b/.github/workflows/guix-nix-policy.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: Guix/Nix Package Policy
 on: [push, pull_request]
 
diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 # Instant Forge Sync - Triggers propagation to all forges on push/release
 name: Instant Sync
 
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 # SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 name: Mirror to Git Forges
 
diff --git a/.github/workflows/npm-bun-blocker.yml b/.github/workflows/npm-bun-blocker.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: NPM/Bun Blocker
 on: [push, pull_request]
 
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: Code Quality
 on: [push, pull_request]
 
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
@@ -1,6 +1,6 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 # RSR Anti-Pattern CI Check
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 #
 # Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm
 # Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: OSSF Scorecard
 on:
   push:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: Security Policy
 on: [push, pull_request]
 
diff --git a/.github/workflows/ts-blocker.yml b/.github/workflows/ts-blocker.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: TypeScript/JavaScript Blocker
 on: [push, pull_request]
 
diff --git a/.github/workflows/wellknown-enforcement.yml b/.github/workflows/wellknown-enforcement.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 name: Well-Known Standards (RFC 9116 + RSR)
 on:
   push:
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: PMPL-1.0
 # workflow-linter.yml - Validates GitHub workflows against RSR security standards
 # This workflow can be copied to other repos for consistent enforcement
 name: Workflow Security Linter
@@ -36,7 +36,7 @@ jobs:
             fi
           done
           if [ $failed -eq 1 ]; then
-            echo "Add '# SPDX-License-Identifier: AGPL-3.0-or-later' as first line"
+            echo "Add '# SPDX-License-Identifier: PMPL-1.0' as first line"
             exit 1
           fi
           echo "All workflows have SPDX headers"
diff --git a/LICENSE b/LICENSE
@@ -0,0 +1,153 @@
+SPDX-License-Identifier: PMPL-1.0
+SPDX-FileCopyrightText: 2024-2025 Palimpsest Stewardship Council
+
+================================================================================
+PALIMPSEST-MPL LICENSE VERSION 1.0
+================================================================================
+
+File-level copyleft with ethical use and quantum-safe provenance
+
+Based on Mozilla Public License 2.0
+
+--------------------------------------------------------------------------------
+PREAMBLE
+--------------------------------------------------------------------------------
+
+This License extends the Mozilla Public License 2.0 (MPL-2.0) with provisions
+for ethical use, post-quantum cryptographic provenance, and emotional lineage
+protection. The base MPL-2.0 terms apply except where explicitly modified by
+the Exhibits below.
+
+Like a palimpsest manuscript where each layer builds upon what came before,
+this license recognizes that creative works carry history, context, and meaning
+that transcend mere code or text.
+
+--------------------------------------------------------------------------------
+SECTION 1: BASE LICENSE
+--------------------------------------------------------------------------------
+
+This License incorporates the full text of Mozilla Public License 2.0 by
+reference. The complete MPL-2.0 text is available at:
+https://www.mozilla.org/en-US/MPL/2.0/
+
+All terms, conditions, and definitions from MPL-2.0 apply except where
+explicitly modified by the Exhibits in this License.
+
+--------------------------------------------------------------------------------
+SECTION 2: ADDITIONAL DEFINITIONS
+--------------------------------------------------------------------------------
+
+2.1. "Emotional Lineage"
+    means the narrative, cultural, symbolic, and contextual meaning embedded
+    in Covered Software, including but not limited to: protest traditions,
+    cultural heritage, trauma narratives, and community stories.
+
+2.2. "Provenance Metadata"
+    means cryptographically signed attribution information attached to or
+    associated with Covered Software, including author identities, timestamps,
+    modification history, and lineage references.
+
+2.3. "Non-Interpretive System"
+    means any automated system that processes Covered Software without
+    preserving or considering its Emotional Lineage, including but not
+    limited to: AI training pipelines, content aggregators, and automated
+    summarization tools.
+
+2.4. "Quantum-Safe Signature"
+    means a cryptographic signature using algorithms resistant to attacks
+    by quantum computers, as specified in Exhibit B.
+
+--------------------------------------------------------------------------------
+SECTION 3: ETHICAL USE REQUIREMENTS
+--------------------------------------------------------------------------------
+
+In addition to the rights and obligations under MPL-2.0:
+
+3.1. Emotional Lineage Preservation
+    You must make reasonable efforts to preserve and communicate the
+    Emotional Lineage of Covered Software when distributing or creating
+    derivative works. This includes maintaining narrative context, cultural
+    attributions, and symbolic meaning where documented.
+
+3.2. Non-Interpretive System Notice
+    If You use Covered Software as input to a Non-Interpretive System, You
+    must:
+    (a) document such use in a publicly accessible manner; and
+    (b) not claim that outputs of such systems carry the Emotional Lineage
+        of the original work without explicit permission from Contributors.
+
+3.3. Ethical Use Declaration
+    Commercial use of Covered Software requires acknowledgment that You have
+    read and understood Exhibit A (Ethical Use Guidelines) and agree to act
+    in good faith accordance with its principles.
+
+See Exhibit A for complete Ethical Use Guidelines.
+
+--------------------------------------------------------------------------------
+SECTION 4: PROVENANCE REQUIREMENTS
+--------------------------------------------------------------------------------
+
+4.1. Metadata Preservation
+    You must not strip, alter, or obscure Provenance Metadata from Covered
+    Software except where technically necessary and with clear documentation
+    of any changes.
+
+4.2. Quantum-Safe Provenance (Optional)
+    Contributors may sign their Contributions using Quantum-Safe Signatures.
+    If Quantum-Safe Signatures are present, You must preserve them in all
+    distributions.
+
+4.3. Lineage Chain
+    When creating derivative works, You should extend the provenance chain
+    to include Your own contributions, maintaining cryptographic linkage to
+    prior Contributors where feasible.
+
+See Exhibit B for Quantum-Safe Provenance specifications.
+
+--------------------------------------------------------------------------------
+SECTION 5: GOVERNANCE
+--------------------------------------------------------------------------------
+
+5.1. Stewardship Council
+    This License is maintained by the Palimpsest Stewardship Council, which
+    may issue clarifications, interpretive guidance, and future versions.
+
+5.2. Version Selection
+    You may use Covered Software under this version of the License or any
+    later version published by the Palimpsest Stewardship Council.
+
+5.3. Dispute Resolution
+    Disputes regarding interpretation of Ethical Use Requirements (Section 3)
+    should first be submitted to the Palimpsest Stewardship Council for
+    non-binding guidance before pursuing legal remedies.
+
+--------------------------------------------------------------------------------
+SECTION 6: COMPATIBILITY
+--------------------------------------------------------------------------------
+
+6.1. MPL-2.0 Compatibility
+    Covered Software under this License may be combined with software under
+    MPL-2.0. The combined work must comply with both licenses.
+
+6.2. Secondary Licenses
+    The Secondary License provisions of MPL-2.0 Section 3.3 apply to this
+    License.
+
+--------------------------------------------------------------------------------
+EXHIBITS
+--------------------------------------------------------------------------------
+
+Exhibit A - Ethical Use Guidelines
+Exhibit B - Quantum-Safe Provenance Specification
+
+See separate files:
+- EXHIBIT-A-ETHICAL-USE.txt
+- EXHIBIT-B-QUANTUM-SAFE.txt
+
+--------------------------------------------------------------------------------
+END OF PALIMPSEST-MPL LICENSE VERSION 1.0
+--------------------------------------------------------------------------------
+
+For questions about this License:
+- Repository: https://github.com/hyperpolymath/palimpsest-license
+- Council: contact via repository Issues
diff --git a/LICENSE-PALIMPSEST.txt b/LICENSE-PALIMPSEST.txt
diff --git a/LICENSE.txt b/LICENSE.txt
diff --git a/README.adoc b/README.adoc

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: AGPL-3.0-or-later`
	`1`	`+# SPDX-License-Identifier: PMPL-1.0`
`2`	`2`	`name: GitHub Pages`
`3`	`3`
`4`	`4`	`on:`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: MIT AND Palimpsest-0.8`
	`1`	`+# SPDX-License-Identifier: PMPL-1.0 AND Palimpsest-0.8`
`2`	`2`	`# SPDX-FileCopyrightText: 2024 Jonathan D.A. Jewell`
`3`	`3`
`4`	`4`	`name: CI`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`		`-# SPDX-License-Identifier: AGPL-3.0-or-later`
	`1`	`+# SPDX-License-Identifier: PMPL-1.0`
`2`	`2`	`# RSR Anti-Pattern CI Check`
`3`		`-# SPDX-License-Identifier: AGPL-3.0-or-later`
	`3`	`+# SPDX-License-Identifier: PMPL-1.0`
`4`	`4`	`#`
`5`	`5`	`# Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm`
`6`	`6`	`# Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme`