From 76df933fc5bca6b345d74064ef43c1e6b05a24aa Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 24 Jun 2026 09:44:55 +0000 Subject: [PATCH] chore(license): comprehensive PMPL residue scrub (owner follow-up) Final pass over the remaining PMPL mentions; boj-server is MPL-2.0 / CC-BY-SA-4.0. Scrubbed (residual PMPL on an MPL-2.0 repo): - src/abi/Boj/Federation.idr: reword the module doc-comment ("PMPL provenance metadata is the legal expression of attestation" -> "Signed provenance metadata complements the hash attestation"). Comment only; no logic change. - .machine_readable/svc/self-validating/examples/setup-repo.k9.ncl: the generic setup example added PMPL-1.0 to any repo; changed to the estate-default MPL-2.0 (canonical mozilla.org text). - .machine_readable/servers/menu.a2ml: attestation format "PMPL-provenance-v1" -> "boj-provenance-v1". - .machine_readable/servers/order-ticket.a2ml: drop "PMPL" from the provenance comment; rename the (pmpl-provenance #t) security field to (provenance #t). NOTE: the menu.a2ml format string and the order-ticket.a2ml field are machine-readable identifiers. Nothing else in the repo references them by name, but if an external consumer keys on the old strings, revert those two hunks. Kept (legitimate, not a licence declaration): the pmpl-mcp cartridge + catalogue entries, the LICENSES/README carve-out note, contractile.just's generic license-keyword grep, and the consent-aware-http prospective-PMPL note (correct estate policy). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01XrPAh7eBSUcVKauTVdXH9Y --- .machine_readable/servers/menu.a2ml | 2 +- .machine_readable/servers/order-ticket.a2ml | 4 ++-- .../svc/self-validating/examples/setup-repo.k9.ncl | 4 ++-- src/abi/Boj/Federation.idr | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.machine_readable/servers/menu.a2ml b/.machine_readable/servers/menu.a2ml index 25393d06..10602cc9 100644 --- a/.machine_readable/servers/menu.a2ml +++ b/.machine_readable/servers/menu.a2ml @@ -344,7 +344,7 @@ # ═══════════════════════════════════════════════════════════════════════════ @attestation: - format = "PMPL-provenance-v1" + format = "boj-provenance-v1" algorithm = "Ed25519+Dilithium5" signature = "PLACEHOLDER" timestamp = "2026-03-08T00:00:00Z" diff --git a/.machine_readable/servers/order-ticket.a2ml b/.machine_readable/servers/order-ticket.a2ml index 583a3047..5b4534e0 100644 --- a/.machine_readable/servers/order-ticket.a2ml +++ b/.machine_readable/servers/order-ticket.a2ml @@ -100,12 +100,12 @@ ; Community nodes additionally verify: ; - Binary hash matches canonical build (Attested proof in Federation.idr) ; - Cartridge hashes match the menu attestation - ; - PMPL provenance chain is intact + ; - provenance chain is intact (security (session-timeout-seconds 3600) (sandbox-cartridges #t) (require-agent-identity #f) ; optional but recommended (audit-log #t) - (pmpl-provenance #t)) + (provenance #t)) ) diff --git a/.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl b/.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl index c05a160d..fa10aa18 100644 --- a/.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl +++ b/.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl @@ -130,9 +130,9 @@ K9! }, "add-license" = { - description = "Add PMPL-1.0 license", + description = "Add MPL-2.0 license", commands = [ - "curl -sL https://raw.githubusercontent.com/hyperpolymath/pmpl/main/LICENSE -o LICENSE", + "curl -sL https://www.mozilla.org/media/MPL/2.0/index.txt -o LICENSE", "echo '✓ License added'", ], }, diff --git a/src/abi/Boj/Federation.idr b/src/abi/Boj/Federation.idr index e3aec201..f2c4ef0f 100644 --- a/src/abi/Boj/Federation.idr +++ b/src/abi/Boj/Federation.idr @@ -13,7 +13,7 @@ ||| - Gossip protocol for node discovery (Byzantine fault tolerant) ||| - Hash attestation ties binary to canonical build ||| - Load-aware routing sends requests to healthy nodes -||| - PMPL provenance metadata is the legal expression of attestation +||| - Signed provenance metadata complements the hash attestation module Boj.Federation import Data.List