From 74029fa954d599e89b288faf8bf02bc022cdb35b Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Tue, 19 May 2026 20:34:08 +0100
Subject: [PATCH] =?UTF-8?q?docs(licence-policy):=20A8=20=E2=80=94=20explic?=
 =?UTF-8?q?it=20owner-sanctioned=20scoped=20carve-outs?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Records the owner's explicit scoped carve-outs (2026-05-19) so A2's
'never automated' default and the active per-file owner-directed
remediation are not self-contradictory: (1) PMPL-1.0->PMPL-1.0-or-later
suffix normalisation (NOT a relicence); (2) idaptik->AGPL (#1);
(3) archive MPL-2.0->PMPL for verified own-content only. Additive;
Rules 1-3 and A1-A5 unchanged. Stacks on A6/A7 (PR #143). Refs
LICENCE-DEBT-LEDGER-2026-05-18.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 LICENCE-POLICY.adoc | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/LICENCE-POLICY.adoc b/LICENCE-POLICY.adoc
index 8370a7d..da0d012 100644
--- a/LICENCE-POLICY.adoc
+++ b/LICENCE-POLICY.adoc
@@ -156,6 +156,33 @@ sentinel with `REPLACE-WITH-*`); `spdx-policy-guard.yml` hard-fails it
 as a real SPDX value (and surfaces A3 variants as non-failing
 warnings). Evidence: `LICENCE-DEBT-LEDGER-2026-05-18`.
 
+=== A8 — Explicit owner-sanctioned scoped carve-outs (2026-05-19)
+
+A2 forbids *automated/bulk* SPDX change as a standing default. The
+owner has issued the following **explicit, scoped, per-file-verified
+carve-outs** to discharge known licence debt. These are owner-directed
+remediation (A2's "manual, per-file, by the owner" — executed under
+explicit owner ruling, enumerated and verified, never a blind sweep),
+NOT a relaxation of A2's default:
+
+. *Suffix normalisation* — `PMPL-1.0` → `PMPL-1.0-or-later`. This is
+  *not a relicence* (identical licence; only the SPDX expression's
+  `-or-later` suffix is corrected — exactly the A3 debt). Authorised
+  estate-wide, per-repo PRs, owner-merged, diff = SPDX-value-only.
+. *Repo licence correction* — `idaptik` is wholly the owner's son's
+  work → `AGPL-3.0-or-later` (Rule 3); ledger ruling #1, ring-fenced by
+  `idaptik/SON-WORK.boundary`.
+. *Archive relicence* — `hyperpolymath-archive` files bearing `MPL-2.0`
+  that are verified 100% the owner's own authored content (no
+  third-party, no vendored, no licence-text) → `PMPL-1.0-or-later`.
+  Verified by read-only fan-out 2026-05-19. Genuine third-party /
+  vendored / licence-text files are never rewritten.
+
+Every carve-out PR is per-file enumerated, SPDX-only, draft for owner
+merge, and references `LICENCE-DEBT-LEDGER-2026-05-18`. Scaffold
+placeholder/variant leaks (A5) remain fixed by *regeneration*, not by
+these carve-outs.
+
 == See Also
 
 * `PALIMPSEST.adoc` (this directory) — full narrative