Search/AdvisoryAI and DAL conversion to EF finishes up. Preparation for microservices consolidation.

docs/legal/THIRD-PARTY-DEPENDENCIES.md

@@ -1,7 +1,7 @@
 # Third-Party Dependencies
 
-**Document Version:** 1.1.0
-**Last Updated:** 2026-01-20
+**Document Version:** 1.1.1
+**Last Updated:** 2026-02-25
 **SPDX License Identifier:** BUSL-1.1 (StellaOps)
 
 This document provides a comprehensive inventory of all third-party dependencies used in StellaOps, their licenses, and BUSL-1.1 compatibility status.
@@ -63,6 +63,8 @@ Full license texts are available in `/third-party-licenses/`:
 - `tree-sitter-MIT.txt`
 - `tree-sitter-ruby-MIT.txt`
 - `AlexMAS.GostCryptography-MIT.txt`
+- `Microsoft.ML.OnnxRuntime-MIT.txt`
+- `all-MiniLM-L6-v2-Apache-2.0.txt`
 
 ---
 
@@ -200,6 +202,12 @@ Primary runtime dependencies for .NET 10 modules. Extracted via `dotnet list pac
 | NetEscapades.Configuration.Yaml | 3.1.0 | MIT | MIT | Yes |
 | Pipelines.Sockets.Unofficial | 2.2.8 | MIT | MIT | Yes |
 
+### 2.15 AI/ML Runtime
+
+| Package | Version | License | SPDX | Compatible |
+|---------|---------|---------|------|------------|
+| Microsoft.ML.OnnxRuntime | 1.20.1 | MIT | MIT | Yes |
+
 ---
 
 ## 3. NuGet Dependencies (Development/Test)
@@ -284,6 +292,7 @@ Components required for deployment but not bundled with StellaOps source.
 | Docker | ≥24 | Apache-2.0 | Apache-2.0 | Tooling | Container runtime |
 | OCI Registry | - | Varies | - | External | Harbor (Apache-2.0), Docker Hub, etc. |
 | Kubernetes | ≥1.28 | Apache-2.0 | Apache-2.0 | Orchestration | Optional |
+| all-MiniLM-L6-v2 embedding model | - | Apache-2.0 | Apache-2.0 | Optional runtime asset | Local semantic embedding model for AdvisoryAI (`VectorEncoderType=onnx`) |
 
 ---