License follow-up: agent-meta → MPL-2.0; scrub PMPL philosophy

[hyperpolymath]

Follow-up to #234, per your refined scope ("revert agent-meta + scrub philosophical mentions"). Docs-only, surgical. Draft for review.

1. Agent-instruction files back to MPL-2.0

#234 relicensed these to CC-BY-SA-4.0; you've since decided agent-instruction files should not count as relicensable docs. Reverted (SPDX header only):

• .claude/CLAUDE.md, .claude/PROJECT.md, .github/copilot-instructions.md

2. Scrub residual PMPL-as-licence-philosophy

• docs/FEDERATION.adoc — removed the sentence "The PMPL license encodes this same principle legally…"; reworded the provenance bullet (PMPL provenance → Cryptographic provenance).
• docs/architecture/README.adoc — reworded the provenance bullet to drop the "the license's … requirements ARE the attestation" framing.
• docs/status/ROADMAP.adoc & docs/outreach/show-hn-draft.md — clarified these reference the pmpl-mcp cartridge (a real product feature), not boj-server adopting PMPL.

Kept on purpose (not residue)

• The consent-aware-http "PMPL applies prospectively" note in docs/planning/… — correct estate policy (it's one of the three genuine PMPL repos).
• The pmpl-mcp cartridge, catalog.json, README catalogue entry, and machine-readable provenance format/protocol fields (subject matter about the product).

Left untouched (flagging for your call)

• A conceptual PMPL comment in src/abi/Boj/Federation.idr — that's code, out of scope for this docs pass. Say the word for a separate code-comment sweep.
• The k9 example fixture setup-repo.k9.ncl ("Add PMPL-1.0 license" sample step) — a framework example, not a boj-server declaration.

No code files and no flake.lock touched (verified); 7 doc/meta files changed.

🤖 Generated with Claude Code

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 214 issues detected

Severity	Count
🔴 Critical	15
🟠 High	130
🟡 Medium	69

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in scorecard-enforcer.yml",
    "type": "missing_timeout_minutes",
    "file": "scorecard-enforcer.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in scorecard-enforcer.yml",
    "type": "scorecard_publish_with_run_step",
    "file": "scorecard-enforcer.yml",
    "action": "split_scorecard_publish_job",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "codeql_missing_actions_language",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/academic-workflow-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/ephapax-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/bofig-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/fireflag-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/sanctify-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server/boj-server/cartridges/hesiod-mcp/adapter/mod.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence